No CVE, no off switch. What stops the Istio ambient bypass: block pods running as UID 1337, drop NET_RAW, enforce mTLS. Benjamin Koltermann's fix list.

From the Cloud Native Computing Switzerland meetup, 15 September 2026.
Full talk: youtu.be/k-DHGADtPP8

#istio #kubernetessecurity