What Doesn't Kill You Makes You Stronger - The Vulnerabilities That Redefined Kubernetes Security

Explore five pivotal CVEs that fundamentally transformed Kubernetes security through this conference talk by examining how critical vulnerabilities like runC escape CVE-2019-5736 and CRI-O's cr8escape were discovered, exploited, and mitigated. Analyze the evolution from a decade ago when a single process could compromise an entire node to understanding how these threats have adapted and moved within the ecosystem. Decode each security incident into reusable threat-model patterns by identifying which capabilities were abused, which boundaries failed, and which controls were implemented to close security gaps. Discover the open-source tools that emerged from each crisis and continue to be essential for operators today, while gaining insight into how containerized workload security has matured and understanding the ecosystem shifts that have driven today's increased resilience in cloud-native environments.