KolTEQ

Join us tomorrow at Cloud Native Zürich for a special Kubernetes Capture The Flag event! Pack your laptops, bring your favorite exploits, and see you there to capture some flags! #Kubernetes #Security #CloudNative #CTF #CloudNativeZurich

Kubernetes and the new BSI C5:2026 The new C5:2026 criteria catalogue for secure cloud computing from Bundesamt für Sicherheit in der Informationstechnik (BSI) is online! The key changes and adoptions are in Container Management, Confidential Computing, Post-Quantum Cryptography and Supply Chain Security. We documented how these changes will impact Kubernetes environments and if Kubernetes can be compliant to the new C5:2026 catalogue, we documented in a blog post: https://lnkd.in/evbTreqR For any questions regarding C5:2026 in your Kubernetes environment, contact us! #Kubernetes #Security #Compliance #C5

AI Agents as Admission Controller? This isn't a belated April Fool's joke, it's actually possible! For the AI #Hackathon of solo.io we built a little PoC using kagent with gemini-2.5-flash. No more writing Policies, let the agent do the work! Until end of April, we will compare different model, fine-tune some and compare the results. If you do not want to miss this, sign up for our newsletter - https://lnkd.in/djp-GSQC. Github: https://lnkd.in/dftNCfu4 Blog: https://lnkd.in/d3yv67ea Built for: https://aihackathon.dev #Kubernetes #Security Disclaimer: Do not use in production! This may break things! At the current stage it's just a PoC!

The recently disclosed Kubernetes RCE vector that can be triggered via Nodes/Proxy GET permissions can be partially mitigated using a Service Mesh approach. While researching how this vulnerability works in detail, we built a Helm chart that deploys Istio resources - ServiceEntry, DestinationRule, and an EnvoyFilter - to prevent exploitability from within a pod. The mitigation works by blocking POST requests to the kubelet for selected pods (based on labels), preventing the attack path from being executed in those workloads. An yes, your normal monitoring still works! Repo + chart: https://lnkd.in/euw7DTDE #Kubernetes #Security #OpenSource

Meet us on August 21 evening at the Cloud Native Bern Meetup and chat about Kubernetes security! Our CEO Benjamin Koltermann, will share insights on "How to: Hacking Kubernetes." Enjoy more talks from Thomas Philipona and Stefano Franco, plus Networking at the Apéro. #CloudNative #Kubernetes More details at: https://lnkd.in/eUPSgJzf

Meet us at Defcon in Las Vegas, where our CEO, Benjamin Koltermann, will deliver a concise session on exploiting Kubernetes vulnerabilities. This is a prime opportunity for those interested in cybersecurity to gain insights from an expert in the field. Don't miss out on this engaging training designed to enhance your understanding of Kubernetes security. #Cybersecurity #Kubernetes