An automated attack reportedly used a credential exposed in a public code issue to conduct reconnaissance for about 15 hours, then launched a seven-minute burst of deletion attempts…
Storm-3168 reportedly gained access through a credential exposed in a public issue, spent about 15 hours performing automated reconnaissance, and then launched a seven-minute burst of deletion attempts…
For a production Kubernetes environment, what secret-management pattern are you using? The main options I'm considering are native Kubernetes Secrets, a Secrets Store CSI Driver, or having applications…
In a production Kubernetes environment, which approach do you generally recommend for storing, accessing, and rotating secrets? The main options I'm considering are native Kubernetes Secrets, the Secrets…
I'm trying to understand what remains after replacing long-lived cloud credentials with workload identity and OIDC. Using identities for services like AWS or S3 seems to eliminate a…
I inherited a couple of in-cluster agent workloads that authenticate to internal APIs and a database using long-lived credentials stored in Kubernetes Secrets. There is also a static…
Our machine identity setup has become difficult to manage across service accounts, certificates, and workload identities. We're looking for a practical way to centralize governance, discovery, rotation, and…
I'm working with an AKS cluster and evaluating the best way to integrate Azure Key Vault for application secrets. The two approaches I'm considering are the Secrets Store…
I've run into an issue where all my pipelines in Azure DevOps suddenly stopped working. After some investigation, I discovered that several service principal secrets had expired. I…
I'm facing a challenge with my AKS clusters that have multiple managed identities created, possibly by Azure. I'm trying to determine how to specify which identity to use…