What We've Learned from Scanning 10K+ Kubernetes Clusters
summary
Scans of 10K+ Kubernetes clusters use cubescape and an Armo platform to collect posture and runtime data and claim actionable metrics not vague advice. Findings show 96% of organizations use Kubernetes, 100% had at least one misconfiguration and 65% had at least one high‑severity misconfiguration, half of clusters fail >14 controls, 63% of containers show vulnerabilities and 46% include critical ones, and many issues trace to exposed workloads, privileged containers and missing resource limits.
AI-written summary · about
chapters (14)
- 0:00Kubernetes security insights
- 1:41Kubernetes as cloud-native OS
- 3:33Kubernetes security myths
- 4:40Kubernetes protection paradigms
- 5:45Armo’s data gathering tool
- 7:11CI/CD posture management
- 8:37Kubernetes security responsibility
- 9:4310K+ cluster statistics
- 10:06Top Kubernetes misconfigs
- 11:11Workload security risks
- 12:15Exposure and resource limits
- 13:20Credentials and capabilities issues
- 14:45Container image vulnerabilities
- 16:10DevSecOps future
related talks
23mWhat We've Learned from Scanning 10K+ Kubernetes Clusters
30mWhat We've Learned from Scanning 10K+ Kubernetes Clusters - Gal Gibli
51mWhat We've Learned From Scanning 10K+ Kubernetes Clusters
10mLightning Talk: What Have We Learned from Scanning Over 10K Unique Clusters with Ku...
51mIntroducing the OWASP Top 10 for Kubernetes
35mUnpacking Open Source Security in Public Repos & Registries
19mKubernetes Security: Navigating the Real-World Challenges
35mInsights into Unsecured Kubernetes in the Wild