Virtualization & Cloud

Leaky Labels: Bypassing Traefik Proxy Leveraging cAdvisor Metrics

July 11, 2024

While examining the exposed information in the metrics endpoint of cAdvisor, we noticed that it exposes container labels for all the running containers on the “/metrics” endpoint. Container labels are key value pairs that are stored as a string. They are used to store metadata such as licensing information, maintainer information, versioning about container objects such as container images, running containers, volumes, daemons, and networks.

PAGES:
1
2
3
4
5
6

Kong API Gateway Misconfigurations: An API Gateway Security Case Study
May 21, 2024
Tools that aggregate access into multiple different environments, such as API gateways, pose a security risk for all these environments upon breach. In this article, we continue our journey through the security issues of the API Gateway landscape. Our new research focuses on another popular API gateway — Kong.
Read more
Observability Exposed: Exploring Risks in Cloud-Native Metrics
May 02, 2024
Container Advisor (cAdvisor) is an open-source monitoring tool for containers that is widely used in cloud services. It logs and monitors metrics like network input/output (I/O), disk I/O, and CPU usage. However, misconfigured deployments might inadvertently expose sensitive information, including environment variables such as Prometheus metrics. In this article, we share our findings of the risks we have uncovered and the vulnerable configurations users need to be aware of.
Read more
Building Resilience: 2024 Security Predictions for the Cloud
February 08, 2024
We delve into the multifaceted nature of cloud cyberthreats in 2024, from the stealthy dangers of data poisoning in machine learning models to the complexities of securing APIs, and more.
Read more
Enhancing Software Supply-Chain Security: Navigating SLSA Standards and the MITRE ATT&CK Framework
January 31, 2024
Attackers abuse different supply-chain scenarios to indirectly compromise organizations and applications. We delve into how a software pipeline works, where attacks could come from, and how to improve security.
Read more
Understanding the Kubernetes Security Triad: Image Scanning, Admission Controllers, and Runtime Security
November 21, 2023
Kubernetes, also known as K8s, is a very complex open-source platform that requires detailed attention to security. Despite previous efforts to increase its security, Kubernetes remains insecure by default and requires different security tools to protect the cluster.
Read more
Mining Through Mountains of Information and Risk: Containers and Exposed Container Registries
October 09, 2023
In this entry, we continue delving into an investigation of exposed registries and look at the types of files and information that malicious actors can access and compromise from these.
Read more
Exposed Container Registries: A Potential Vector for Supply-Chain Attacks
September 26, 2023
In this entry, we will discuss publicly exposed registries, which are repositories or databases containing information accessible to the public without the need for authentication.
Read more
Analyzing the Risks of Using Environment Variables for Serverless Management
July 14, 2022
We examined the potential risks associated with using the serverless environment service for secrets management.
Read more
An Analysis of Azure Managed Identities Within Serverless Environments
June 14, 2022
We examine Azure’s Managed Identities service and its security capability in a threat model as developers’ go-to feature for managing secrets and credentials.
Read more

PAGES:
1
2
3
4
5
6

Virtualization & Cloud

Leaky Labels: Bypassing Traefik Proxy Leveraging cAdvisor Metrics

Kong API Gateway Misconfigurations: An API Gateway Security Case Study

Observability Exposed: Exploring Risks in Cloud-Native Metrics

Building Resilience: 2024 Security Predictions for the Cloud

Enhancing Software Supply-Chain Security: Navigating SLSA Standards and the MITRE ATT&CK Framework

Understanding the Kubernetes Security Triad: Image Scanning, Admission Controllers, and Runtime Security

Mining Through Mountains of Information and Risk: Containers and Exposed Container Registries

Exposed Container Registries: A Potential Vector for Supply-Chain Attacks

Analyzing the Risks of Using Environment Variables for Serverless Management

An Analysis of Azure Managed Identities Within Serverless Environments

Resources

Support

About Trend

Country Headquarters

Virtualization & Cloud

Resources

Support

About Trend

Country Headquarters

The Americas

Middle East & Africa

Europe

Asia & Pacific