Mapping Risks and Threats in Kubernetes to the MITRE ATT&CK Framework

This Aqua blog post presents a Kubernetes-focused threat matrix mapped to the MITRE ATT&CK framework, outlining evolving threats to containerized and K8s environments and highlighting common techniques such as compromised kubeconfig files, pod name spoofing, Secrets enumeration, and lateral movement via cluster networking and writable host mounts; it aims to help SecOps teams understand adversary tactics and improve defenses.