Nearly 1 Million Misconfigured Kubernetes Instances Found Vulnerable
The research firm Cyble has discovered nearly 1 million Kubernetes deployments have been found vulnerable due to misconfigurations, which could lead to the loss of sensitive data. Although the report doesn’t imply that all misconfigured instances could lead to the exposure of data, it does imply that the misconfigurations can make Kubernetes deployments vulnerable.
Even organizations like Tesla were discovered to have deployed the Kubernetes console without password protection, which lead hackers to infiltrate at least one Kubernetes pod to give them access to the Tesla Amazon S2 bucket containing sensitive data.
During their investigation, Cyble discovered the United States had the highest exposure count, followed by China and Germany. The top 3 exposed ports were 443, 10250, and 6443. And, thanks to online scanners, it has become easy for hackers to find exposed assets within Kubernetes clusters.
According to Cyble, “Misconfigurations like utilizing default container names, not having the Kubernetes Dashboard protected by a secure password, and leaving default service ports open to the public can place businesses at risk of data leakage.”
To avoid these misconfigurations, Cyble warns that companies should always keep Kubernetes updated, remove debugging tools from any/all production containers, and consistently review permissions for any individual with access to the Kubernetes API.
Related content
- Kubernetes Vulnerability Found and Fixed
-
Secure Kubernetes with Kubescape
Kubescape checks Kubernetes container setups for security and compliance issues, making life easier for administrators. -
Kubernetes for small and medium-sized enterprises
We look at the benefits of Kubernetes outside of large corporate environments. -
Securing the container environment
Implement a good, robust defense with an in-depth strategy of applying multiple layers of security to all components, including the human factor. -
Nested Kubernetes with Loft
Kubernetes has limited support for multitenancy, so many admins prefer to build multiple standalone Kubernetes clusters that eat up resources and complicate management. As a solution, Loft launches any number of clusters within the same control plane.