GKE/Gmail vulnerability: notes and tips

Security researchers have identified a GKE misconfiguration where the system:authenticated group can include any Google-authenticated account (including external Gmail accounts), which may allow attackers to take control of Kubernetes clusters; researchers estimate up to 250,000 clusters could be at risk. The report emphasizes misconfigurations as a major Kubernetes security problem, recommends auditing role bindings (especially system:anonymous, system:unauthenticated, and system:authenticated) and scoping permissions, and points to investigative resources such as a Kubernetes mind map and cheat sheet for mapping attacker tactics.