Vulnerabilities
Patch Argo CD 2.1-3.6.0 to Block RCE via Helm Plugin Injection With Low Permissions
Argo CD versions 2.1.0 through 3.6.0-rc1 contain a critical vulnerability allowing remote code execution via Helm plugin injection.
Kubernetes
Everything Patch Review has reported about Kubernetes: 2 stories, newest first. Part of our Cloud Security coverage.
Cloud Security
Kubernetes Security Basics: Answers to Common Questions
Container isolation fails when the underlying host kernel is shared, meaning a single compromised pod can expose the entire node if network policies are not strictly enforced.