Skip to content
Threat Feed
Subscribe

Product

Azure Kubernetes Service (AKS)

2 briefs RSS
medium advisory

Abuse of Kubernetes TokenRequest API for Credential Access

Attackers with initial cluster access are abusing the Kubernetes TokenRequest API to mint arbitrary service account tokens, facilitating privilege escalation, cloud resource pivoting, and persistence without leaving filesystem artifacts.

Elastic Kubernetes Service +3 credential-access kubernetes cloud-security audit-logs
1r 1t
high advisory

Detection of Unauthorized Reverse Shells via Azure AKS Pod Exec

Attackers are exploiting the 'kubectl exec' capability in Azure Kubernetes Service to establish unauthorized reverse or bind shells by injecting malicious command-line patterns into pod execution requests.

Azure Kubernetes Service cloud kubernetes azure execution command-and-control
3t