Threat Research

CVE-2023-38545
Threat Research, Cloud Security, Kubernetes & Container Security

CVE-2023-38545: High Severity cURL Vulnerability Detection

On Oct. 11, a new version of curl (8.4.0) was released where a couple of new vulnerabilities were fixed (CVE-2023-38545...
Miguel Hernández | October 12th, 2023
Read more
Threat Research, Cloud Security

Detecting and Mitigating CVE-2023-4911: Local Privilege Escalation Vulnerability
Threat Research, Cloud Security, Kubernetes & Container Security

AWS’s Hidden Threat: AMBERSQUID Cloud-Native Cryptojacking Operation
Cloud Security, Kubernetes & Container Security, Open Source, Threat Research

eBPF Offensive Capabilities – Get Ready for Next-gen Malware
Cloud Security (217) Compliance (56) Kubernetes & Container Security (205) Monitoring (96) Open Source (85) Sysdig Features (154) Threat Research (92)
Filter By:
Reset Filters
Showing 85-91 of 91
Threat Research, Kubernetes & Container Security, Open Source

Detecting and Mitigating CVE-2021-25737: EndpointSlice validation enables host network hijack

The CVE-2021-25737 low-level vulnerability has been found in Kubernetes kube-apiserver where an authorized user could redirect pod traffic to private...
Stefano Chierici | May 24th, 2021
Open Source, Kubernetes & Container Security, Threat Research

Exploiting and detecting CVE-2021-25735: Kubernetes validating admission webhook bypass

The CVE-2021-25735 medium-level vulnerability has been found in Kubernetes kube-apiserver that could bypass a Validating Admission Webhook and allow unauthorised...
Stefano Chierici | April 28th, 2021
Threat Research, Kubernetes & Container Security, Open Source

Mitigating CVE-2021-20291: DoS affecting CRI-O and Podman

The CVE-2021-20291 medium-level vulnerability has been found in containers/storage Go library, leading to Denial of Service (DoS) when vulnerable container...
Stefano Chierici | April 16th, 2021
Threat Research, Kubernetes & Container Security

Detecting and mitigating Apache Unomi’s CVE-2020-13942 – Remote Code Execution (RCE)

CVE-2020-13942 is a critical vulnerability that affects the Apache open source application Unomi, and allows a remote attacker to execute...
Stefano Chierici | March 10th, 2021
Threat Research, Kubernetes & Container Security, Open Source

How to detect sudo’s CVE-2021-3156 using Falco

A recent privilege escalation heap overflow vulnerability (CVSS 7.8), CVE-2021-3156, has been found in sudo. sudo is a powerful utility...
Stefano Chierici | January 28th, 2021
Threat Research, Kubernetes & Container Security

THREAT ALERT: Crypto miner attack involving RinBot’s server, a popular Discord bot

The Sysdig Security Research team has identified crypto mining activities coming from the server hosting the popular RinBot Discord bot....
Kaizhe Huang | January 27th, 2021
Detect CVE-2020-8554 using Falco
Threat Research, Kubernetes & Container Security, Open Source

Detect CVE-2020-8554 – Unpatched Man-In-The-Middle (MITM) Attack in Kubernetes

The Kubernetes API server, in all versions of Kubernetes, unfortunately allows an attacker, who is able to create a ClusterIP...
Nigel Douglas | December 23rd, 2020
1 … 6 7 8

Subscribe to our newsletter and get the latest updates!