Viewing profile — jkaftzan

A newly disclosed MongoDB vulnerability, tracked as CVE-2025-14847 and informally referred to as MongoBleed, allows unauthenticated remote attackers to leak uninitialized memory fr…

CVE-2023-5043, CVE-2023-5044 and CVE-2022-4886 can be exploited by attacker to steal secret credentials from K8s cluster. Three security issues were reported on October 27th by the…

Try Kubescape

Here you go https://github.com/kubescape/kubescape

Cool! Happy you like it!

Kubescape, an end-to-end open-source Kubernetes security platform, embarks on a new journey. Kubescape, created by ARMO, will fully migrate to the CNCF. This coincides with the lau…

CVE-2022-47633: Kyverno’s container image signature verification can be bypassed by a malicious registry or proxy

All the main K8s vulnerabilities from 2022 consolidated into one article. Put together by Ben Hirschberg, founder of ARMO, the makers of Kubescape.

Check this new survey on the state of OSS K8s security

Grafana Labs published a security advisory for a new critical vulnerability in its open-source product. The vulnerability, marked as CVE-2022-39328, enables attackers to bypass aut…

ARMO have open sourced yet another important component – Kubescape operator. This operator can be installed in-cluster using Helm, and is responsible, for the continuous configurat…

Kubescape, an open source K8s security solution, is celebration one year anniversary. now all the major components of Kubescape are open source