NSA, CISA: Here's how we can properly secure Kubernetes

Cybersecurity, Kubernetes, The report, exploit the complexities, best endpoint protection tools, best firewall apps and services, best laptops for programming, containers, cryptomining, best antivirus software

The National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA) have published a comprehensive technical report to help administrators harden their Kubernetes instances.

The report comes in the backdrop of an increase in the number of attacks that exploit the complexities in securing Kubernetes deployments. NSA argues that Kubernetes is commonly targeted either for data theft, computational power theft, or denial of service.

“This guidance describes the security challenges associated with setting up and securing a Kubernetes cluster. It includes hardening strategies to avoid common misconfigurations and guide system administrators and developers of National Security Systems on how to deploy Kubernetes with example configurations for the recommended hardening measures and mitigations,” reads the document summarizing its intentions.

Over fifty pages long, the report analyzes the container build workflows orchestrated by Kubernetes, and discusses the security policies that admins should implement to ward off any attackers.

Batten down the hatches

The NSA argues that the three common sources of compromise in Kubernetes are supply chain risks, malicious threat actors, and insider threats.

Irrespective of the attack vector though, the NSA suggests various mechanisms to set up and secure a Kubernetes cluster.

In a snap, they suggest scanning the containers and pods for vulnerabilities or misconfigurations, while recommending administrators run containers and pods with the least possible privileges.

Additionally, the document also suggests implementing strict network policies to separate resources in order to prevent the lateral movement of threat actors in the event a cluster is compromised.

NSA cites data theft as the primary motivation of compromising Kubernetes clusters, although it acknowledges that threat actors might also seek to harness its underlying computational power for malicious purposes such as cryptomining.

News Related

OTHER NEWS

Far Cry 6: Here's how PC will have an edge over consoles

If you are thinking of purchasing Far Cry 6 on PC, there is some edge you are going to have over those who will play on consoles as the PC ... Read more »

Trump Sues NYT and Niece—Who Calls Him ‘F*cking Loser'

Brandon Bell/Getty Former President Donald Trump has filed a lawsuit against The New York Times, three of its reporters, and his niece—claiming they hatched an “insidious plot” to obtain his ... Read more »

We May Finally Know What Caused That Huge Ozone Hole in The Arctic Last Year

© Copernicus/DLR/BIRA/ESA Ozone levels over the Arctic between 9 March 2020 until 1 April 2020. The unusually large hole that opened up in the ozone layer over the Arctic last ... Read more »

Google is making search better in Gmail for Android users

Searching in Gmail can be a bit cumbersome, especially on smartphones. Compared to that, searching in Gmail on Web is a smoother and more convenient process. That was mainly because ... Read more »

Another reason why iPhone users must upgrade to iOS15 immediately

Apple launched iOS 15 for iPhone users globally on Monday and on the same day, the tech giant silently announced that the new operating system comes with a number of ... Read more »

Vehicle recalls top 2 mln in Jan.-Aug. period

SEOUL, Sept. 22 (Yonhap) — The number of vehicles recalled in South Korea surpassed 2 million in the first eight months of this year, with more quality problems discovered in ... Read more »

China pushes hi-tech factories to reassert manufacturing dominance and avoid the ‘middle income trap'

At a factory in China’s north, workers are busy testing an automated vehicle designed to move bulky items around industrial spaces, one of a new generation of robots Beijing wants ... Read more »

CSGO Adds Shorter Matches, Makes Massive Change To Dust 2

If you’re a CSGO fan, get ready for some of the biggest changes the game has seen in years. As part of the Operation Riptide additions, Valve is including a new mode for ... Read more »

PS5 giveaway: here's your chance to win a PlayStation 5 bundle on eBay Australia

It’s been real tough trying to secure a next-gen console in Australia, with PlayStation 5 stock arriving infrequently and often lasting mere minutes before being sold out once again. © ... Read more »

What is hacking — and how can you protect yourself?

Yahoo Life is committed to finding you the best products at the best prices. Some of the products written about here are offered in affiliation with Yahoo. We may receive ... Read more »

All the Best Productivity Features in iOS 15, iPadOS 15 and watchOS 8

As Apple’s WWDC event highlighted back in June, iOS 15, iPadOS 15 and watchOS 8 bring with them a long list of exciting updates. From health to connectivity, Apple’s list ... Read more »

Hyundai, Kia's eco-friendly vehicle sales in US more than double in Aug.

This file photo shows the EV6 all-electric model. (Kia Corp.)Hyundai Motor Co. and its affiliate Kia Corp.’s environment friendly vehicle sales in the United States more than doubled in August ... Read more »

What's the difference between hackers, malware and data breaches?

Yahoo Life is committed to finding you the best products at the best prices. Some of the products written about here are offered in affiliation with Yahoo. We may receive ... Read more »

China's Oppo doubles down on 5G with partner Ericsson as US sanctions-hit Huawei leaves void in smartphone industry

Chinese consumer electronics firm Oppo, the world’s fourth-largest smartphone vendor in the past three quarters, has teamed up with Swedish telecommunications giant Ericsson to pursue advances in 5G technology, with ... Read more »

Best Optus mobile plans (September 2021)

Optus mobile plans are seriously compelling, often hitting the sweet spot between data, cost and coverage. However, the telco has recently increased the price of its plans for new customers, ... Read more »

Facebook's Portal Go Looks to Be An Innovative Portable Smart Display

© Facebook Facebook’s newest Portal puts premium video chatting in the palm of your hand with an integrated handle and long-lasting battery. The Download On Tuesday afternoon, Facebook announced two ... Read more »

Hyundai, Kia's eco-friendly vehicle sales in U.S. more than double in Aug.

SEOUL, Sept. 22 (Yonhap) — Hyundai Motor Co. and its affiliate Kia Corp.’s environment friendly vehicle sales in the United States more than doubled in August compared with a year ... Read more »

Slack's new video tool is @here—and you might already be able to use it

Video updates and cross-company digital chats in the place of meetings are part of the vision Slack has for the future of hybrid working. The messaging platform announced these new ... Read more »

New mobile phone museum to launch online next month

The platform will chart the evolution of the mobile phone from 1984 to the present day, containing more than 2,000 unique handsets from 200 different manufacturers. Read more »

Now you can convert any image into a sticker directly from WhatsApp

By Vía Cine Premiere They will agree that one of the most attractive and fun tools to use within the famous instant messaging application are stickers . Although, the app ... Read more »

Frustrated by Your Outdated Phone Plan? Get Ready for Smart Contracts.

As avid smartphone users, we depend on mobile providers to supply us with the network we need to use Facebook, stream shows on Netflix and send photos to our friends, no ... Read more »

Let's Celebrate Ola's All-women Factory, But That's Just a Start

Bhavish Aggarwal, Ola’s founder, made history when he announced an all-women workforce factory. He announced the decision through his Twitter account: “Aatmanirbhar Bharat requires Aatmanirbhar women! Proud to share that ... Read more »

Do you want to digitize your SME? BanBajío offers credits for up to 30 million pesos for the technological transformation of your business

Undoubtedly, the pandemic increased the need for digitization in companies of all sectors and sizes. But not all of them managed to take the step, in many cases due to ... Read more »

Start Your Coding Journey with Python

Many programmers tell you that the best first programming language to learn is Python. That’s due to a number of reasons. First, it’s by far the most popular programming language ... Read more »

Do you want to work in a tech company? These are the skills they are looking for

What are companies looking for today? Over the years we have witnessed technological advances and how every day companies look for trained or experienced people in the technology sector, however, ... Read more »

Major New York Real Estate Company Now Accepting BTC as Payment

Magnum Real Estate is set to accept bitcoin as payment for a three-store retail condominium in Manhattan’s East Side. – be[IN]crypto Major real-estate opportunity for bitcoin investors Magnum Real Estate ... Read more »

Rolls-Royce's first all-electric aircraft successfully flies and marks a milestone in the airline industry: VIDEO

British luxury automaker Rolls-Royce successfully completed the test flight of its first fully electric aircraft . The aircraft, dubbed the Spirit of Innovation , marks a milestone in the airline ... Read more »

8 Zoom Etiquette Rules Everyone Should Follow

Zoom meetings are now a staple in our day-to-day lives and show no signs of going away, even as many employers welcome workers back to their offices. The challenges and ... Read more »

What is a Blockchain and how does it work on Bitcoin?

“Blockchain” , as its English name implies, means chain of blocks . Information is stored in these groupings; The Blockchain’s purpose is to keep unique and unalterable records of the ... Read more »

Blockchains Are the New App Stores

It’s become impossible to not have the attention of cryptocurrency and the technology supporting the industry. It’s become mainstream and there seems to be no clear stop of the disruption. ... Read more »

What are tk domains? The small group of islands that dominates the internet

The world of web domains can be a complicated subject and can often be a considerable expense for entrepreneurs just starting out. For this inconvenience, a company located in an ... Read more »

Free courses from the best universities in Argentina

For many years, Argentina has become a host country for foreign students. The educational quality of its universities, as well as the facilities of its public universities to start an ... Read more »

Airlines cut aircraft fleets amid pandemic-driven slump

Aircrafts queue up at Incheon International Airport. (Yonhap)South Korea’s airlines have drastically reduced their aircraft fleets over the past two years as demand for air travel dried up due to ... Read more »

Mad at Facebook and Instagram? Organizers want you to join The Facebook Logout

Would you log off from Facebook and Instagram for a day? How about three? Social justice and civil rights groups are calling for a nationwide boycott starting Nov. 10 to ... Read more »

Unleash Innovation: How Technology and Operations Can Drive Performance

Many people mistakenly think operations like product development, sales, marketing, finance, etc., all have different processes and goals. To certain extent, that’s true, but all these operations have common goals ... Read more »

'Manhunt: The Night Stalker': The chilling true story that inspired Martin Clunes's ITV drama

Martin Clunes as DCI Colin Sutton in Manhunt: The Night Stalker. (ITV) Gripping new ITV drama Manhunt: The Night Stalker retells the chilling true story of DCI Colin Sutton and ... Read more »

ADB maintains its 2021 growth outlook for S. Korean economy at 4 pct

SEOUL, Sept. 22 (Yonhap) — The Asian Development Bank (ADB) on Wednesday kept its 2021 growth outlook for the South Korean economy at 4 percent, as economic recovery momentum has ... Read more »

Imports of cats, dogs double in 2 yrs amid pandemic-driven stay-at-home mode: data

INCHEON, Sept. 22 (Yonhap) — South Korea has imported twice as many cats and dogs this year compared with two years ago as people spend more time at home amid ... Read more »

The PlayStation Store Is Running A Whopping Double Discounts Sale

The PlayStation Store has kicked off a whole new sales season this month, with a bunch of great deals on PS5 and PS4 hits and double discounts for PlayStation Plus users. ... Read more »

Retro 51 rolls out space shuttle Enterprise limited edition Tornado pen

© Provided by Space Retro 51’s new Space Shuttle Enterprise Tornado rollerball pen reproduces the look of the iconic prototype orbiter. Forty-five years after it made its public debut, NASA’s ... Read more »