Kubernetes DNS Exploit Enables Git Credential Theft from ArgoCD
A new attack chain messes withKubernetes DNS resolutionandArgoCDâs certificate injectionto swipe GitHub credentials. With the right permissions, a user inside the cluster can reroute GitOps traffic to a fake internal service, sniff auth headers, and quietly walk off with tokens. Whatâs broken:GitOp..