Lightning Talk: What Have We Learned from Scanning Over 10K Unique Clusters with Ku...
summary
Kubescape scans over 10K unique Kubernetes clusters, YAML and Helm charts against NSA‑CISA and MITRE ATT&CK rules and reports that 100% of clusters have at least one issue, 65% have at least one high‑severity misconfiguration, and 35% of clusters contain at least one critical vulnerability. Top failures are privileged containers, cluster‑admin bindings, missing resource limits, and not blocking ingress/egress. 63% lack CPU/memory limits; a one‑liner kubectl installer produces a report in minutes.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 0:35What have we learned
- 2:27Best Practices
- 3:48Top 5 Misconfigurations
- 5:04Not having a proper limitation
- 5:34Secrets
- 6:12Dangerous Capabilities
- 6:53Vulnerability
related talks
18mWhat We've Learned from Scanning 10K+ Kubernetes Clusters
23mWhat We've Learned from Scanning 10K+ Kubernetes Clusters
30mWhat We've Learned from Scanning 10K+ Kubernetes Clusters - Gal Gibli
51mWhat We've Learned From Scanning 10K+ Kubernetes Clusters
10mLightning Talk: Kubernetes Risk Assessment: Time to go one level deeper
06mLightning Talk: Why you Should Really Pay Attention to K8S Security Best Practices - Benjy Portnoy
35mInsights into Unsecured Kubernetes in the Wild
35mUnpacking Open Source Security in Public Repos & Registries