Skip to content
How Did Aqua Catch a Cryptomining Attack Hiding in Memory?
Sign in
Contact
Support
We're hiring!
Platform
Aqua Platform
Runtime Powered Cloud Security
Monitor behavior, detect exploitable risk, enforce policy and contain threats across the application lifecycle.
Platform overview
Code Security
Scanning & Assurance
Scan artifacts across the entire software development lifecycle
Software Supply Chain Security
Protect your code, tools, and processes
Vulnerability Management
Advanced Code-to-Cloud vulnerability management to reduce noise and fix fast
Runtime Security
Container Security
Full lifecycle advanced protection for containerized applications
Cloud Workload Protection (CWPP)
Runtime protection for every cloud native workload
Hybrid-Cloud & Multi-Cloud Security
Code to Cloud security for hybrid and multi-cloud deployments
GenAI Application Security
Secure GenAI Applications from Code to Runtime
Posture Management
CI/CD Pipeline Security
Automate DevSecOps
Kubernetes Security
Holistic Kubernetes Security for the Enterprise
Cloud Security Posture Management
Extend traditional CSPM with workload visibility
Solutions
Solutions
Monitor
Monitor Behavior Across Every Environment
Detect
Detect Exploitable Risk and Active Attacks
Enforce
Enforce Policy Inline at the Point of Execution
Contain
Contain Threats and Maintain Control
Compliance
Prove Compliance in the Most Regulated Environments
Hybrid and Multi-Cloud
Secure Applications Across Hybrid and Multi-Cloud
Industry
Federal
Protect Highly Sensitive Data
Financial Services
Protect FinServs From Cyber Threats
Resources
The best of cloud native
Aqua Blog
Expert insight, best practices and advice on cloud native security, trends, threat intelligence and compliance
Read the Blog
Resources
Resources Center
eBooks, Data sheets, Whitepapers, Webinars, and much more
The Cloud Native Channel
Cloud native security webinars & videos
Aquademy
The Aqua academy
Cloud Native Wiki
The educational center for everything cloud native
Company
Recognized Leadership
CISO Choice Awards
Winner for Cloud Workload Protection Platform (CWPP)
Forrester Consulting: The Total Economic Impact™ of Aqua CNAPP
90% Reduction in vulnerability research and detection time
Frost & Sullivan CNAPP report
Top innovation leader
About Us
Newsroom
Customers
Partners
Careers
Support
Services
Upcoming Events
Connect
Contact
Twitter
Facebook
Linkedin
Instagram
News
Aqua Security Turns Runtime Intelligence into Action with Agentic Response, Debuts Risk Dashboards
Aqua Security Doubles Down on Runtime to Deliver Measurable Cloud Risk Reduction
ActiveState Joins Trivy Partner Connect to Cut CVE Noise and Reduce Alert Fatigue for Developers
Get Started
Aqua Cloud Native Blog
› Tags: Kubernetes RBAC
Expert insight, best practices and advice on cloud native security, trends, threat intelligence and compliance.
KUBERNETES SECURITY
The History of Kubernetes
Did you know that Kubernetes originally had no built-in features for managing user permissions, or that support for storing data persistently didn’t appear until Kubernetes was four years old?
SECURITY RESEARCH
First-Ever Attack Leveraging Kubernetes RBAC to Backdoor Clusters
We have recently discovered the first-ever evidence that attackers are exploiting Kubernetes (K8s) Role-Based Access Control (RBAC) in the wild to create backdoors. The attackers also deployed DaemonSets to take over and hijack resources of the K8s clusters they attack. Our research suggests that this campaign is actively targeting at least 60 clusters in the …
KUBERNETES SECURITY
Kubernetes RBAC: How to Avoid Privilege Escalation via Certificate Signing
Following on from our previous post on the risks of privilege escalation in Kubernetes via the node/proxy resource, we’re going to take a look at how users who have rights to the certificate signing request (CSR) API in Kubernetes might be able to use them to escalate their privileges in a cluster. In addition to …
KUBERNETES SECURITY
Privilege Escalation from Node/Proxy Rights in Kubernetes RBAC
One of the side effects of Kubernetes’ rich API and extensive functionality is that sometimes there are security implications to granting users permissions. Security architects should be aware of these side effects when designing platforms that use Kubernetes. In recent research with Iain Smart of NCC Group, we looked at how granting rights to node/proxy …
KUBERNETES SECURITY
RBAC Virtual Verbs: Teaching Kubernetes to Educate Dolphins
Kubernetes’ role-based access control (RBAC) system is a cornerstone of cluster security. Most clusters use RBAC to determine which users have access to specific operations, and its core elements are well covered in the Kubernetes documentation. However, there are some less well-known features that could be relevant when creating or using tools designed to ensure …
Need to secure enterprise workloads?
Aqua Cloud Native Application Protection Platform (CNAPP)
Go cloud native with the experts!
Get Demo