API Security Weekly: Issue #9

Vulnerabilities

If you are using Kubernetes, you should install a patch for it as soon as possible. There was a huge privilege escalation vulnerability that got fixed this week. The flaw allows attackers to contact Kubernetes API server using a non-privileged account and then get high-privilege operations forwarded to backend services. Even worse, the calls are not showing up in server audit logs or server logs, making the attack hard to detect.

Abraham Ingersoll from Gravitational published details here: https://goo.gl/VMJ9ZX

Mule Kernel 4: Anypoint Studio

#ICYDK: In the last article, I described my attempts with writing Mule apps in IntelliJ for Kernel edition. With no luck. Here, I will focus on writing a simple application in an environment that we should know pretty well…Anypoint Studio. After that, I will deploy this application on the Kernel application server to test how it works. If you are interested in basic information about Mule Kernel 4, look at this article where I have revealed some basic news.

Anypoint Studio

The newest version of Anypoint Studio can be downloaded from here. If you have already installed Studio, I encourage you to compare versions. It happens that slightly older versions like 7.2.2 won’t get upgrades to version 7.3. It is good to check this, especially when rapid development of this IDE is made. https://goo.gl/21BCFC