Cloud
Customers being told GDPR disclosure unnecessary
A critical vulnerability in an Azure tool that lets users manage Kubernetes clusters can be exploited remotely without authentication to gain administrative control over Kubernetes clusters, as well as Azure edge devices. The vulnerability, allocated a maximum possible CVSS (severity rating) score of 10 has been allocated CVE-2022-37968.
Hyperscalers may be tired of making the case for resilience, regulators are not done with fretting...
Oracle fixed the vulnerability "extraordinarily quickly" in July, but it is unclear when it was introduced
"Adversaries continue to have success with older, widely publicized and patchable exploits."
Strong new requirements for cloud providers and network security on their way.
