Cybersecurity articles tagged #Kubernetes on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/teampcp-s-evolving-threat-redis-cloud-native-supply-chain-attackshttps://runtimerebel.com/blog/teampcp-s-evolving-threat-redis-cloud-native-supply-chain-attacksTeamPCP, active since 2020, now targets Redis, Docker, Kubernetes, and supply chains, deploying wipers and backdoors.Fri, 07 Aug 2026 08:47:09 GMTTeamPCPCloud NativeSupply Chain AttackKubernetesWiperhttps://runtimerebel.com/blog/unpatched-argo-cd-repo-server-rce-via-internal-port-exposurehttps://runtimerebel.com/blog/unpatched-argo-cd-repo-server-rce-via-internal-port-exposureAn unpatched vulnerability in the Argo CD repo-server allows unauthenticated attackers to achieve RCE and potentially take over Kubernetes clusters.Thu, 02 Jul 2026 00:58:30 GMTArgo CDKubernetesGitOpsRCESynacktivhttps://runtimerebel.com/blog/azure-backup-for-aks-vulnerability-risks-of-silent-patcheshttps://runtimerebel.com/blog/azure-backup-for-aks-vulnerability-risks-of-silent-patchesA reported Azure Backup for AKS vulnerability allowed potential cluster compromise. Learn why Microsoft rejected the report and the impact of silent fixes.Sun, 17 May 2026 00:54:57 GMTAzureAKSKubernetesMicrosoftCloud Securityhttps://runtimerebel.com/blog/pcpjack-worm-analyzing-the-malware-displacement-in-cloud-environmentshttps://runtimerebel.com/blog/pcpjack-worm-analyzing-the-malware-displacement-in-cloud-environmentsPCPJack is a new Golang-based worm targeting AWS, Docker, and Kubernetes. Learn how it removes TeamPCP and steals credentials to compromise cloud infrastructure.Fri, 08 May 2026 08:38:51 GMTPCPJackTeamPCPCloud SecurityDockerKubernetesCredential Thefthttps://runtimerebel.com/blog/cve-2024-9486-critical-kubernetes-image-builder-flaws-exposedhttps://runtimerebel.com/blog/cve-2024-9486-critical-kubernetes-image-builder-flaws-exposedCritical vulnerabilities in Kubernetes Image Builder allow root access via hardcoded credentials. Update to version v0.1.38 to mitigate potential exploits.Tue, 28 Apr 2026 05:12:51 GMTCVE-2024-9486CVE-2024-9487KubernetesProxmoxNutanixPrivilege Escalationhttps://runtimerebel.com/blog/teampcp-backdoors-litellm-1-82-7-1-82-8-via-ci-cd-compromisehttps://runtimerebel.com/blog/teampcp-backdoors-litellm-1-82-7-1-82-8-via-ci-cd-compromiseTeamPCP threat actors compromised LiteLLM versions 1.82.7 and 1.82.8, deploying credential harvesters and Kubernetes lateral movement tools via CI/CD.Tue, 24 Mar 2026 20:18:30 GMTLiteLLMTeamPCPSupply Chain AttackPython SecurityKuberneteshttps://runtimerebel.com/blog/teampcp-targets-kubernetes-clusters-with-iran-specific-wiper-malwarehttps://runtimerebel.com/blog/teampcp-targets-kubernetes-clusters-with-iran-specific-wiper-malwareTeamPCP is targeting misconfigured Kubernetes clusters to deploy a data-wiping script that specifically triggers on Iranian system configurations and locales.Mon, 23 Mar 2026 20:17:25 GMTTeamPCPKubernetesWiper MalwareCloud SecurityIranhttps://runtimerebel.com/blog/trivy-supply-chain-attack-malicious-docker-hub-images-identifiedhttps://runtimerebel.com/blog/trivy-supply-chain-attack-malicious-docker-hub-images-identifiedAttackers hijacked Trivy Docker Hub images (v0.69.4-0.69.6) to distribute infostealers and Kubernetes wipers. Learn how to detect and remediate this threat.Mon, 23 Mar 2026 12:22:52 GMTTrivyDocker HubKubernetesInfostealerWiperhttps://runtimerebel.com/blog/proactive-defense-hardening-against-destructive-cyberattacks-2026-editionhttps://runtimerebel.com/blog/proactive-defense-hardening-against-destructive-cyberattacks-2026-editionComprehensive guide on hardening against destructive cyberattacks, including wipers, ransomware, and data destruction tactics across on-premises and cloud environments.Fri, 06 Mar 2026 16:26:03 GMTDestructive AttacksWiper MalwareRansomwareHardeningCyber ResilienceMFABackupActive DirectoryKubernetesCI CDCloud SecurityNetwork Segmentationhttps://runtimerebel.com/blog/securing-ai-infrastructure-mitigation-strategies-for-lifecycle-vulnerabilitieshttps://runtimerebel.com/blog/securing-ai-infrastructure-mitigation-strategies-for-lifecycle-vulnerabilitiesAn assessment of architectural risks in AI deployments, emphasizing infrastructure-level threats and model supply chain vulnerabilities over application-layer prompt…Mon, 23 Feb 2026 05:35:03 GMTAI SecurityKubernetesContainer EscapeSupply Chain