September 17, 2026
- Unit 42 showed that an attacker with root on a compromised Kubernetes node can manipulate control-group metadata to defeat SPIFFE/SPIRE workload attestation, causing credentials to be issued for co-located applications. As @FelipeFumero663 puts it, the point of workload identity was not having to trust the node. @Unit42_Intel. · Cloud, Identity & Containers
in One Extension Hijacks the AI Assistant in Five Major Browsers