Detecting Container Escapes with Falco: A Practical Guide to Kubernetes Runtime Security

Your container just spawned a shell and mounted the host filesystem. By the time your vulnerability scanner runs its nightly check, the attacker has already pivoted to three other nodes. They've read your service account tokens, queried the Kubernete...