Microsoft finds default Kubernetes Helm charts can expose data

Microsoft warns about the security risks posed by default configurations in Kubernetes deployments, particularly those using out-of-the-box Helm charts, which could publicly expose sensitive data. In many cases, those Helm charts required no authentication, left exploitable ports open, and used weak or hardcoded passwords that were trivial to break. A report published by security researchers Michael Katchinskiy and Yossi Weizman of Microsoft Defender for Cloud Research highlights three cases as examples of a broader security issue that puts Kubernetes workloads at risk. Kubernetes is a widely used open-source platform designed to automate the deployment, scaling, and management of containerized applications. Helm is a package manager for Kubernetes, and charts are templates/blueprints for deploying apps on the platform, providing YAML files that define key resources needed to run an app. Helm charts are popular because they simplify and speed up complex deployments. However, as highlighted in Microsoft's report, in many cases, the default settings in those charts lack proper security measures. Users inexperienced with cloud security often deploy those Helm charts as they are, unintentionally exposing services to the internet and allowing attackers to scan and exploit misconfigured applications. "Default configurations that lack proper security controls create a severe security threat," warns the Microsoft researchers. "Without carefully reviewing the YAML manifests and Helm ...