Threat Research

Threat Research, Cloud Security

LLMjacking: Stolen Cloud Credentials Used in New AI Attack

The Sysdig Threat Research Team (TRT) recently observed a new attack that leveraged stolen cloud credentials in order to target...
Alessandro Brucato | May 6th, 2024
Read More
Threat Research

Meet the Research behind our Threat Research Team
Threat Research

Building Honeypots with vcluster and Falco: Episode II
Threat Research, Cloud Security

RUBYCARP: A Detailed Analysis of a Sophisticated Decade-Old Botnet Group
Cloud Security (279) Compliance (65) Kubernetes & Container Security (213) Monitoring (97) Open Source (90) Sysdig Features (160) Threat Research (99)
Filter By:
Reset Filters
Showing 85-90 of 90
Open Source, Kubernetes & Container Security, Threat Research

Exploiting and detecting CVE-2021-25735: Kubernetes validating admission webhook bypass

The CVE-2021-25735 medium-level vulnerability has been found in Kubernetes kube-apiserver that could bypass a Validating Admission Webhook and allow unauthorised...
Stefano Chierici | April 28th, 2021
Threat Research, Kubernetes & Container Security, Open Source

Mitigating CVE-2021-20291: DoS affecting CRI-O and Podman

The CVE-2021-20291 medium-level vulnerability has been found in containers/storage Go library, leading to Denial of Service (DoS) when vulnerable container...
Stefano Chierici | April 16th, 2021
Threat Research, Kubernetes & Container Security

Detecting and mitigating Apache Unomi’s CVE-2020-13942 – Remote Code Execution (RCE)

CVE-2020-13942 is a critical vulnerability that affects the Apache open source application Unomi, and allows a remote attacker to execute...
Stefano Chierici | March 10th, 2021
Threat Research, Kubernetes & Container Security, Open Source

How to detect sudo’s CVE-2021-3156 using Falco

A recent privilege escalation heap overflow vulnerability (CVSS 7.8), CVE-2021-3156, has been found in sudo. sudo is a powerful utility...
Stefano Chierici | January 28th, 2021
Threat Research, Kubernetes & Container Security

THREAT ALERT: Crypto miner attack involving RinBot’s server, a popular Discord bot

The Sysdig Security Research team has identified crypto mining activities coming from the server hosting the popular RinBot Discord bot....
Kaizhe Huang | January 27th, 2021
Detect CVE-2020-8554 using Falco
Threat Research, Kubernetes & Container Security, Open Source

Detect CVE-2020-8554 – Unpatched Man-In-The-Middle (MITM) Attack in Kubernetes

The Kubernetes API server, in all versions of Kubernetes, unfortunately allows an attacker, who is able to create a ClusterIP...
Nigel Douglas | December 23rd, 2020
1 … 6 7 8

Subscribe to our newsletter and get the latest updates!