Container Security
Lessons from the field. Always landing on my feet.
New Pods, Same Finding: Testing Defender’s Kubernetes Controller Scope
On October 5, 2026, Microsoft announced a welcome change to how Microsoft Defender for Cloud reports Kubernetes misconfigurations. Affected Kubernetes Security Posture Management (KSPM) recommendations are moving from individual running container …
Copy Fail in the Cloud: A Defender, Sentinel, and AKS Response Guide for CVE-2026-31431
Review update (September 25, 2026): The retained Sentinel/AKS evidence was captured May 2, 2026, without executing Copy Fail exploit code. The May 3 CVE/KEV snapshot remains historical; its May 15 due date has passed. Recheck the live NVD record and …
Agent 365 Launch Playbook: I Tested the Defender Response for AI Agent Attacks
Review update (September 26, 2026): The source reviewed September 26 requires explicit GA model/version selection and Python 3.12 hash-locked dependencies. Current rules use stable alert IDs and ingestion freshness, without a fixed artificial …
AKS Runtime Security: Binary Drift, Anti-Malware & Gated Deployment with Defender for Cloud
Review update (September 25, 2026): The merged September 25 source resolves and records an exact regional GA Kubernetes patch on first deployment and refuses implicit version changes on owned reruns. Pricing restoration is bound to the captured …
Secure Your Container Supply Chain: SBOM, Signing & Attestation with GitHub Actions
Review update (September 25, 2026): The merged-source publication verified the current image signature, SPDX SBOM and SLSA provenance at 2026-09-26 03:31:15 UTC (September 25 in America/Chicago). The digest is …