A threat-informed roadmap for securing Kubernetes clusters (KubeCon EU 2024)

Announcement of a KubeCon EU 2024 talk and tl;drsec guest post on threat-informed Kubernetes security, based on a year of honeypot observations of attacks against Docker and Kubernetes APIs; it highlights real-world exploitation of container escape vulnerabilities, common attacker methods to deploy malicious workloads or backdoor clusters, and practical, high-value defenses, with links to the blog, slides, and recording.