Dagan Henderson and Will Kline: The Threat Inside the Cluster — Common Kubernetes Vulnerabilities

A DEF CON 30 talk about common security flaws in the Kubernetes ecosystem. No 0-days — only real-world issues discovered and responsibly disclosed in open-source projects.

Through three live demos, the speakers show: authentication bypass in Kiali, cluster takeover via leaked GitOps keys in Fleet, and a container escape in Longhorn leading to root access on the host.