A security researcher found a new Kubernetes vulnerability but it turned out to be a deliberate feature, reports TNS Senior Editor Joab Jackson.
Security researcher Graham Helton found the Kubernetes vulnerability, which allows users with read-only permission to run arbitrary and even privileged commands on any pod in a cluster. The twist? When Helton reported the hole in November, Kubernetes maintainers promptly closed the ticket, labeling it “intended behavior.”
This discovery forces IT leaders to ask whether they’re prioritizing telemetry at the expense of security.
Google today announced AI features for the Chrome browser that include a new Auto Browse feature, a new AI side panel for Gemini interactions, and integration with its imaging model. TNS Senior Editor for AI Frederic Lardinois drills down into what these Gemini-powered features bring to the browser.
Kubernetes' nodes/proxy GET call, commonly used by monitoring tools, can be exploited to execute privileged commands and compromise entire clusters without leaving an audit trail. It's a feature, not a bug.
If Kubernetes admins don't have enough to worry about with the upcoming Nginx gateway cutoff, they now may need to rifle through their Helm charts to potentially thwart a dangerous setting.
Security researcher Graham Helton has...
The clock is ticking! Join us live tomorrow as we explore the top five managed file transfer trends transforming how organizations move data in 2026 and beyond.
