A post-exploitation technique that lets attackers with root-level access to a Kubernetes node steal workload identities issued through SPIFFE/SPIRE and impersonate legitimate applications running on the same host. The technique undermines the node-trust assumption behind cloud-native machine identity systems, potentially enabling attackers to access services protected by mutual TLS and identity-based authorization. Palo Alto Networks […]
The post Kubernetes Attack Lets Hackers Steal SPIFFE Workload Identities and Impersonate Applications appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.