CyberPulse Cybersecurity News, with Source Links
FA
AWS Security Blog

Addressing protocol security gaps in multi-tenant Kubernetes

Protocols like Android Debug Bridge (ADB) and Web Real-Time Communication (WebRTC), by default, use unencrypted channels for network communications and don’t support enterprise authentication mechanisms like JSON Web Tokens (JWTs). In a multi-tenant Kubernetes cluster—including Amazon Elastic Kubernetes Service (Amazon EKS)—pods can reach other tenants’ open ports by default unless you configure network policies to […

Cloud Security Mobile Development DevOps & Infrastructure Identity & Access Security Governance, Risk & Compliance
Read the full article at AWS Security Blog Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →
CyberInsider

IPVanish passes independent audit confirming its no-logs policy

IPVanish says its third independent no-logs audit found no records of customers’ browsing activity, DNS queries, or individual VPN connections in the systems examined. The full report also details what the VPN provider does keep for abuse prevention, confirming that aggregate usage statistics are retained for up to 24 hours. Schellman Compliance completed the assessment … The post IPVanish passes independent audit co…

Networking & Internet Privacy Governance, Risk & Compliance
Source
The Hacker News

Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot

Threat actors are attempting to exploit a recently disclosed security flaw impacting OpenSSH that can enable sign-ins to accounts that have no password set, according to Previdian. The vulnerability, tracked as CVE-2026-123158 (CVSS score: 8.1) and codenamed SSHole (or *sshole), impacts Linux systems that run OpenSSH on the musl C library with Pluggable Authentication Modules (PAM) disabled,

Vulnerabilities & Zero-Day Operating Systems Identity & Access Security
Source