What Doesn't Kill You Makes You Stronger - The Vulnerabilities That Redefined Kubernetes Security

Explore five pivotal CVEs that fundamentally transformed Kubernetes security through this conference talk examining critical vulnerabilities from runC escape CVE-2019-5736 to CRI-O's cr8escape. Discover how these security incidents were discovered, exploited, and mitigated while learning to decode each vulnerability into reusable threat-model patterns that identify abused capabilities, failed boundaries, and implemented controls. Analyze the evolution from a decade-old runC escape that allowed a single process to compromise entire nodes to more recent threats that demonstrate persistent security challenges in container orchestration. Understand which boundaries failed in each case and examine the specific controls that were developed to close security gaps. Learn about the open-source security tools that emerged from each crisis and continue to be essential for cloud-native operators today. Gain insights into the maturation of containerized workload security and explore the ecosystem shifts that have driven increased resilience in modern Kubernetes deployments.