The monitoring tool that could read the rest of the cluster's secrets
New research into Kubernetes operators shows how a useful maintenance tool can carry permissions far beyond its job. IBM's Prometurbo case makes the consequences unusually clear.
INSIGHTS & PRACTICAL GUIDANCE
Security, explained.
Clear explanations and useful steps from Short Circuit LLC. For original vulnerability findings and advisories, explore our research ↗.
All articles
40 ARTICLES / PRACTICAL CYBERSECURITY
A helpdesk breach can reach far beyond the ticket queue
The Zammad incident shows why a support system deserves close attention: it holds conversations, connects to other services, and can expose much more than its own web interface.
When a spreadsheet’s data connection becomes permission to run code
New LibreOffice and Apache OpenOffice disclosures expose a dangerous gap between reading spreadsheet data and running software. The two suites require different responses.
HFS could accept a forged login even when nobody knew the password
The HFS vulnerability exposes a gap between checking a password and trusting the session that follows. Here is what the July fix changed, why the flaw mattered and what October attack observations establish.
An Atlassian file leak can expose the trust between your business tools
CVE-2026-21589 exposes particular files in Atlassian applications. The consequences depend on what those files contain and which other systems will trust the credentials inside them.
The Apple flaw hiding between a letter’s outline and its pixels
A document preview has to turn shapes into pixels. Apple’s rendering flaw shows how a mistake in that ordinary work can cross a memory boundary—and why the operating system needs the repair.
A trusted software release can still betray the developer installing it
Tensorlake’s compromised npm release came through the project’s own publishing process. Following it from source code to installation reveals what origin checks can establish and where a developer’s computer can become exposed.
What remains to check after a NetScaler gateway is patched
Installing the NetScaler fix closes a known weakness. It cannot explain what happened before the update. We follow the decisions a business faces when restoring remote access and investigating possible earlier intrusion.
The old software still working behind a business’s new website
A new website can still rely on an old name server, content service or document editor. Five additions to CISA’s exploited-vulnerability catalog show why a software inventory needs to look behind the pages customers see.