Kubernetes Security Best Practices
Earlier this year, Tesla suffered a  complex cryptocurrency mining malware infection caused by a misconfiguration in the Kubernetes console. The attackers exploited the fact that the particular Kubernetes console wasn’t password protected, allowing them to access one of the pods that included access credentials for Tesla’s larger AWS environmentGiven the amount of driving data that Tesla has, and the apparent scope of the breach, I’m surprised the attackers only mined some crypto. Wonder if that’s because the data is well segregated, or if mining crypto is just more profitable than extracting and leaking data?