TGViewer
Kubesploit Kubesploit @kubesploit · 2.13K subscribers
Post #1434 470
Gatekeeper's k8sallowedrepos can be bypassed if repo entries lack a trailing /.

Attackers exploit prefix matching to pull images from fake subdomains like myrepo.io.attacker.com. Aqua shows real examples, a fixed v2 policy, and Trivy detection.

More: https://ku.bz/fYQfsmHt-
Open in Telegram All posts from @kubesploit
More from @kubesploit
  1. Oct 2, 2026Falco Event Generator creates suspicious system and Kubernetes activity so teams can safel…
  2. Oct 2, 2026Supply chain security is easier to reason about when it has layers. Meg Sarros frames cont…
  3. Oct 1, 2026Wardline is a self-hosted control-plane proxy for AI agents that enforces identity, policy…
  4. Sep 30, 2026FQDN Network Policy turns hostnames into current IP addresses and creates standard Kuberne…
  5. Sep 30, 2026"The next 10 years are going to be boring — in the good sense." Mauro Morales sees Kuberne…
  6. Sep 30, 2026This week on Learn Kubernetes Weekly 203: 🔥 Building Modelplane on Crossplane 🚪 Kubernet…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →