Passkey Phishing Hits Entra ID - MFA Persistence Chain
Passkey-themed social engineering compromises Entra ID with MFA persistence. Plus SPIFFE identity spoofing in K8s and Cisco FMC CVE-2026-20079 exploitation.
Posts tagged: Kubernetes
Kubernetes RBAC Bypass: When Least Privilege Isn't Actually Configured
How Kubernetes RBAC misconfigurations enable privilege escalation. Real Tesla breach, CVE-2018-1002105, kubectl audit commands, and RBAC hardening playbook.
Container Escape: Breaking Out of Docker Into the Host
How attackers break out of Docker containers using privileged mode, mounted sockets, and CVE exploits. Detection with Falco, hardening with seccomp and …