platform
Kubernetes: security advisories, deprecations and releases
Container orchestration platform.
- Items, 90 days
- 31
- Critical
- 0
- Last critical
- none
- This week
- 3
What your digest would have held this week
3 items from the last 7 days. Zero sends only the ones that touch your stack.
Security 4
- HIGH Wiz Blog · 19 Oct 2026
Loud, Fast, and Everywhere: Anatomy of a Real AI-Driven Cloud Attack
Wiz CIRT details AI-driven attacks that target cloud, Kubernetes, CI/CD, and identity environments and how defenders can detect them.
- HIGH Datadog Security Labs · 5 Oct 2026
Guarding the gates: Assessing dangerous permissions granted to Kubernetes built-in principals
Analysis of over 65,000 clusters found dangerous RBAC permissions granted to built-in principals system:anonymous, system:unauthenticated, and system:authenticated.
- MEDIUM Cloudanix Threat Intelligence · 2 Oct 2026
Storm-3068
The threat actor Storm-3068 initiated an attack by compromising a user account through a self-service password reset process. After gaining control of the identity by registering their own authentication methods, the actor pivoted to Azure DevOps. They used legitimate administrative tools and scripts to enumerate repositories and pipelines. The actor then modified development pipelines to harvest Kubernetes credentials (kubeconfig files)…
- MEDIUM Cloudanix Threat Intelligence · 2 Oct 2026
MacSync
MacSync is a rapidly evolving malware-as-a-service (MaaS) infostealer targeting macOS, first seen as Mac.c in 2025. A new variant, spotted in September 2026, features a significantly overhauled infection chain that replaces script-based droppers with binary ones written in Objective-C and Swift. The attack begins with a malicious DMG disguised as cracked software, which leads to a multi-stage download process that…
Deprecations 4
- HIGH ACT BY 27 OCT 2026 endoflife.date · 27 Oct 2026
Kubernetes 1.34 has reached end of life
Kubernetes 1.34 reached end of life on 2026-10-27, as listed by endoflife.date.
- HIGH Kubernetes Blog · 6 Oct 2026
Kubernetes cgroup v1 deprecated; v1.35 fails kubelet on v1 nodes
Starting with Kubernetes v1.35, kubelet refuses to start on cgroup v1 nodes by default. The temporary failCgroupV1: false override will be removed in a later release.
- HIGH ACT BY 27 OCT 2026 endoflife.date · 2 Oct 2026
Kubernetes 1.34 reaches end of life on 2026-10-27
Kubernetes 1.34 reaches end of life on 2026-10-27, as listed by endoflife.date.
- LOW ACT BY 28 FEB 2027 endoflife.date · 2 Oct 2026
Kubernetes 1.35 reaches end of life on 2027-02-28
Kubernetes 1.35 reaches end of life on 2027-02-28, as listed by endoflife.date.
Releases 10
- INFO NEW THIS WEEK Kubernetes Blog · 29 Oct 2026
Certified Kubernetes AI Conformance Program launched
CNCF launches certification program with 31 certified platforms, defining vendor-neutral requirements for AI workloads on Kubernetes.
- INFO Oracle Cloud Infrastructure release notes · 8 Oct 2026
Support for Kubernetes version 1.37.0 in a preview release of Kubernetes Engine
Oracle Cloud Infrastructure Kubernetes Engine now supports Kubernetes 1.37.0 in preview for early access testing in the OC1 realm only; it is not intended for production workloads.
- MEDIUM Kubernetes Blog · 5 Oct 2026
Kubernetes 1.34 node swap reaches GA for higher pod density
Node swap support is now generally available in Kubernetes 1.34, allowing nodes to page anonymous memory to disk to increase pod density on memory-constrained clusters.
- INFO AWS What's New · 3 Oct 2026
Amazon EKS and EKS Distro now support Kubernetes 1.37
Amazon EKS and EKS Distro now support Kubernetes 1.37, allowing new clusters and upgrades with improved Metrics API, Dynamic Resource Allocation, and Horizontal Pod Autoscaler scale-to-zero.
- INFO Kubernetes releases · 2 Oct 2026
Kubernetes v1.34.12 released
Patch release for the 1.34 branch with fixes and updates.
- INFO Kubernetes releases · 2 Oct 2026
Kubernetes v1.35.9 released
Kubernetes v1.35.9 patch release is now available for download.
- INFO Kubernetes releases · 2 Oct 2026
Kubernetes v1.36.5 released
Kubernetes v1.36.5 is now available with updated binaries and changelog.
- INFO Kubernetes releases · 2 Oct 2026
Kubernetes v1.37.1 released
Kubernetes 1.37.1 is now available with the latest bug fixes and updates from the CHANGELOG.
- INFO Kubernetes Blog · 2 Oct 2026
Kubernetes v1.37: Tracking When a PersistentVolumeClaim Was Last Used (Beta)
Kubernetes v1.37 adds an Unused condition to PVCs that shows whether any non-terminated pod is using the claim and when it became idle.
- MEDIUM ACT BY 3 NOV 2026 Oracle Cloud Infrastructure release notes · 2 Oct 2026
Support for Kubernetes version 1.36.4
OCI Kubernetes Engine now supports Kubernetes 1.36.4 alongside 1.35.2 and 1.34.10. Version 1.36.1 will lose support on November 3, 2026.
News and tools 13
- HIGH NEW THIS WEEK ACT BY 10 NOV 2026 CNCF Blog · 30 Oct 2026
Surviving the Churn: Read Replicas and Controllers for Busy Kubernetes Clusters
Anthropic shares how LIST requests and watchers caused cascading apiserver failures on large clusters and how they mitigated the issue.
- INFO NEW THIS WEEK Kubernetes Blog · 27 Oct 2026
Kubernetes Workload Conformance Working Group announced
New working group is creating a shared standard and tests for how workloads behave on Kubernetes clusters.
- INFO CNCF Blog · 26 Oct 2026
Isolation, Security, Scale for Agentic Workloads with kagent and Agent Substrate
Explains how to sandbox AI agents on Kubernetes using gVisor, microVMs, and kagent for isolation, policy enforcement, and efficient resource usage.
- INFO CNCF Blog · 23 Oct 2026
Multi-tenant GPU Kubernetes on simulated hardware with Kamaji and HAMi
Walkthrough of building two isolated tenant clusters on one host using Kamaji for control planes and HAMi for fractional GPU allocation, simulated with mock device plugin.
- INFO CNCF Blog · 21 Oct 2026
Before you evaluate an AI SRE, give your existing agent context
Benchmark shows providing an existing coding agent with cluster context (current failures, change history) cuts diagnosis time from 191s to 64s average and improves accuracy slightly on 50 Kubernetes faults.
- INFO OpenSSF Blog · 20 Oct 2026
What’s in the SOSS Podcast #76 – Invisible Infrastructure, Autonomous Agents, 10 Years Cloud Native
Podcast episode with CNCF CTO Chris Aniszczyk discusses Kubernetes as the operating system for AI, cultural friction in AI teams, SBOM tooling, and autonomous-agent security challenges.
- MEDIUM CNCF Blog · 19 Oct 2026
How AI workloads are reshaping Kubernetes autoscaling
AI accelerator needs are exposing gaps between Kubernetes scheduler and autoscaler, causing pending pods despite available capacity.
- MEDIUM CNCF Blog · 9 Oct 2026
Who owns NIS2 and DORA on a Kubernetes platform team
Explains how to map NIS2 and DORA regulatory requirements to concrete Kubernetes artifacts so that platform teams, not security, own the work.
- INFO Kubernetes Blog · 5 Oct 2026
GKE Node Memory Swap how-to for Local SSD profiles
Google Kubernetes Engine now supports node swap configuration on Local SSD node pools through the Node Memory Swap feature.
- INFO Pulumi Blog · 3 Oct 2026
Building Kubernetes PR Previews with Shared Pulumi Components
Shows how to use one Pulumi component resource to manage both long-lived and ephemeral Kubernetes environments, giving every pull request its own isolated namespace and stack.
- MEDIUM tl;dr sec · 3 Oct 2026
CiliumHound: Graphing Kubernetes Network Policies
BloodHound OpenGraph extension that ingests Cilium network policies and creates searchable graphs to audit L3/L4/L7 rules and identify policy gaps.
- INFO CNCF Blog · 2 Oct 2026
Guardrails, not gates: rethinking policy in platform teams
Argues that Kubernetes policy engines should focus on mutation, generation, and helpful validation instead of default-deny gates to improve developer experience.
- INFO Kubernetes Blog · 2 Oct 2026
Spotlight on SIG Apps: Kubernetes workload APIs and resilience
Interview with SIG Apps chairs Janet Kuo and Maciej Szulik on the evolution of Deployments, StatefulSets, DaemonSets, Jobs, CronJobs, and new AI-focused subprojects like Agent Sandbox, JobSet, and LeaderWorkerSet.
Only hear about Kubernetes when it touches your stack
Tell Zero what you run. You get one email, and only on the days something above applies to you.