Skip to content
Threat Feed
Subscribe

Tag

Security-Policy

2 briefs RSS
high advisory

IBM Portieris Image Policy Enforcement Bypass

IBM Portieris versions 0.5.0 through 0.14.2 contain a missing authorization vulnerability that allows authenticated attackers to bypass image policy enforcement by manipulating pod owner references.

Portieris vulnerability kubernetes ibm security-policy
1t 1c
medium advisory

HushSpec: Security Policy Specification for AI Agent Action Boundaries

HushSpec is an open specification under development to standardize security policies at the action boundary of AI agents, focusing on actions such as file access, network egress, and shell execution, aiming to create a portable and engine-agnostic policy layer.

AI-Agent security-policy action-boundary
2r 1t 1i