<- Back to Insights
April 10, 2024
Microsoft Plugs Gaping Hole in Azure Kubernetes Service Confidential Containers
Summary
Microsoft has issued a critical security update to address a severe vulnerability in its Azure Kubernetes Service, identified as CVE-2024-29990, which allowed unauthenticated attackers to gain complete control over Azure Kubernetes clusters by stealing credentials. This vulnerability was part of a larger security update that covered over 150 flaws, highlighting Microsoft's ongoing struggle with cybersecurity as evidenced by recent government critiques of its security practices and response to cyber incidents. The patch release, which is Microsoft's most substantial since 2017, also fixed additional security issues across various Microsoft products, including Microsoft Defender for IoT and Windows Secure Boot, amid heightened scrutiny of the company's ability to protect against cyberthreats.
![]()
Explore Related Topics
