As Kubernetes grows in popularity, it has attracted the attention of more security researchers, who probe the software looking for weaknesses. And like any software, there are certainly plenty of bugs to be found, some of which an attacker can use to penetrate and even take control of a cluster.  In a recent a webinar from the Cloud Native Computing Foundation, Gadi Naor founder of the Kubernetes security provider Alcide, summarized five recent Kubernetes vulnerabilities — including one that took over six months for the CNCF to alert K8s users about.

Read full article on The New Stack