Guarding the gates: Assessing dangerous permissions granted to Kubernetes built-in principals

Datadog Security LabsOctober 5, 2026Cloud

We analyzed RBAC bindings across over 65,000 Kubernetes clusters to find dangerous permissions granted to system:anonymous, system:unauthenticated, and system:authenticated.

Summary from Datadog Security Labs.

Read the full article at Datadog Security Labs

Explained

The technology and terms in this story. Learn more

TechnologyKubernetesThe system most companies use to run and scale containerised applications across many servers.

Guarding the gates: Assessing dangerous permissions granted to Kubernetes built-in principals

Explained

More in Cloud

Microsoft 365 accounts compromised at 79 organizations, no passwords needed

Widespread Token-Spraying Attacks Target Microsoft 365 Accounts For Email Compromise

Google opens its cloud to rival OpenAI, promises business data won’t train models

ASPM in the AI Era Part 2: Prioritize Exploitable Risks with Code-to-Cloud Context

M365 Token Spray and Replay Campaign Compromises Business Email Accounts