/
ttps_attack:T1550.001 × criticity:medium × limpar

Resultados

2 casos · pág. 1/1

unit42.paloaltonetworks.com · medium

Unit 42 research: root on a Kubernetes node enables SPIFFE/SPIRE workload identity spoofing via cgroup manipulation (Spooffe tool)

Unit 42 published research showing that an attacker with root access on a compromised Kubernetes node can misuse SPIFFE/SPIRE workload attestation to impersonate co-located workloads and harvest their SVIDs. The attacker spoofs the Linux cgroup information the SPIRE agent uses to identify callers, so the agent issues a victim workload's i…

cisa.gov · medium

CISA red team assessments of two critical infrastructure orgs: both fully compromised, but only one detected and contained the intrusion

CISA ran concurrent red team assessments at two organizations: Organization A (Government Services and Facilities) and Organization B (Water and Wastewater Systems). Both reached full domain compromise and accessed sensitive business systems (SBSs) and cloud resources. Organization A did not detect or contain the activity. Organization B …

government water and wastewater