Following our discovery of a critical loophole in Google Kubernetes Engine (GKE) dubbed Sys:All, we decided to conduct research into the real-world impacts of this issue. Our initial probe already revealed over a thousand vulnerable GKE clusters due to admins configuring RBAC bindings making the system:authenticated group overprivileged, which could potentially allow any Google account […]
In 2021, RedHat decided to discontinue CentOS, a subscription-free alternative to RHEL that many companies, administrators, developers and end users rely on. CentOS provides an advantage to those needing to test platforms or development environments. CentOS’s end-of-support date is June 30, 2024. This means users must find an alternative distribution. There are several options to […]
The United States, South Korea and Japan have decided to establish a high-level consultative body on cyber issues, primarily to tackle North Korea’s cyber activities, the office of South Korea’s president announced on Monday. The main purpose of the group, which will meet on a quarterly basis, is to strengthen “practical joint response capabilities to […]