EKS audit logs are off by default - here is how to catch RBAC recon, static pods and node role theft. https://intel.threadlinqs.com/threat/TL-2026-3664 #ThreatIntel #Synacktiv #EKS #RBAC

EKS audit logs are off by default - here is how to catch RBAC recon, static pods and node role theft. https://intel.threadlinqs.com/threat/TL-2026-3664 #ThreatIntel #Synacktiv #EKS #RBAC
Unpopular opinion: most RBAC problems aren't technical. Nobody knows who has cluster-admin because nobody wrote down why they got it.
Start with a spreadsheet. Seriously. Then automate it.
#Kubernetes #RBAC
etcd v3 auth: every request needs a valid cert or token, checked against role perms in /auth. Here's how to enable auth and grant roles securely.
https://www.valtersit.com/vault/enforce-rbac-with-etcd-auth-enable-and-role-grants-f002d5/
#etcd #rbac #security
… et si nous ne pouvons pas vous aider, nous disposons d’un réseau de consultants vers lesquels nous pouvons vous orienter.
La collaboration vaut mieux que la compétition.
Échangeons ensemble.
#UserRoleCustomization #RoleBasedAccessControl #RBAC #CassiusConsulting
... and if we can't help you, we have a network of consultants we can refer you to.
Collaboration beats competition.
Let's have a conversation.
#UserRoleCustomization #RoleBasedAccessControl #RBAC #IdentityManagement #AccessManagement #UserPermission #CassiusConsulting
Not everyone needs full access. LexiVirt has three roles: Admin (everything), Operator (daily VM work), Viewer (read only). Safe access for students, contractors, colleagues.
https://lexi-cloud.com
#RBAC #Security #LexiVirt
ChatGPT Enterprise ve Edu yöneticileri artık eklenti erişimini role göre Available, Install veya Disabled olarak ayarlayabiliyor.
RBAC kullanan kurumlar için daha ayrıntılı yönetişim geliyor.
#ChatGPT #OpenAI #RBAC #KurumsalAI #EnterpriseAI #Eklentiler
RBAC para agentes de IA: es la mitad de la respuesta
¿Alcanza RBAC para agentes de IA? Mirá por qué un kubectl delete puede colarse y cómo sumar una verificación previa antes de ejecutar comandos
#rbac #agentesdeia #claudecode #seguridad #kubernetes
[IMP Post] 📌Understanding and Managing Unlicensed Administrator Access in Microsoft Intune -
www.anoopcnair.com/allow-unlice...
#MSIntune #UnlicensedAdmins #IntuneAdministrator #EntraID #RBAC #HTMDCommunity
A study of 65,000+ Kubernetes clusters found built-in principals like system:anonymous and system:authenticated still receive risky RBAC permissions, with excessive bindings across AKS, EKS, and GKE. #Kubernetes #RBAC #CloudSecurity
🚀 Excited to share my latest open-source project: PowerShell.IGA.AccessGuard.
🔹 Export RBAC baselines
🔹 Detect permission drift
Built for Azure administrators, cloud engineers,
🔗 github.com/mimachniak/P...
#Azure #PowerShell #RBAC #IaaC #Security #bicep #Microsoft #MVPBuzz
OperTraitor reveals Kubernetes operators abusing RBAC ► wildcard roles hiding cluster-admin paths. #Kubernetes #RBAC #Security #OperTraitor #CloudSecurity #DevOps https://thedailytechfeed.com/opertraitors-flags-over-privileged-kubernetes-operators-with-admin-paths/
Unit 42 releases OperTraitor, an LLM-powered tool to audit Kubernetes operators for excessive RBAC permissions. Many operators on OperatorHub found to be overly permissive, creating silent backdoors. #Kubernetes #DevSecOps #RBAC #CloudSecurity
🌐 cyber[.]netsecops[.]io
@paloaltonetworks.com
Overprivileged operators can expose cluster secrets and enable autonomous AI-driven compromise.
-
IOCs: CVE-2026-6389
-
#Kubernetes #RBAC #ThreatIntel
#Kubernetes #RBAC #MCP #PlatformEngineering
Most people are experimenting with agents and gradually warming up to giving them more access to help debug issues and perform mundane tasks for them. Some examples with Kubernetes include reading logs and describing pods. We
Kubernetes RBAC Nightmare: Why Your Default ServiceAccount is a Backdoor — hands-on guide for sysadmins. #kubernetes #security #rbac
Your agent can query the knowledge graph. Can it read the CEO's salary? Delete an asset with zero trace? Break GDPR without anyone knowing?
#RBAC won't save you. Your #graph can. Join us next week:
https://youtube.com/live/6k096_wfHCY
#Neo4j #AgenticAI @indykite.bsky.social
Role-based access in CYPEX uses PostgreSQL roles to separate user actions (Capabilities) from data access (Data Scope).
This approach reduces audit complexity while keeping access control precise and maintainable.
El principio de mínimo privilegio es clave: cada empleado solo debe acceder a lo estrictamente necesario. Con RBAC, gestionas permisos de forma segura y escalable mediante roles definidos. ¡Toma el control! 🔐 #K3RBEROS #RBAC #ControlAcceso #Ciberseguridad #SeguridadIT