More than 380,000 Kubernetes API servers allow some kind of access ... unauthenticated remote code execution (RCE) and complete server takeover–continues to be targeted by attackers.

Kubernetes already has a good reputation as ... applications based on a microservice architecture by getting the API right and provides a good level of abstraction," Guiu states.

The real-world effect of the bug becomes clear when you consider that the Kubernetes API server can be used for authentication and access control – as Palo Alto researchers pointed out ...