Kloak: kernel-space secret injection via eBPF on Kubernetes

When an application gets breached, the first thing an attacker will do is exfiltrate whatever data they can reach. From customer data to authentication tokens, secrets are target number one (goodbye to your GitHub PATs, your Slack bots in #general channels, your Mailchimp tokens, OpenAI keys, and so on). You&rsquo;ll have to revoke everything, assuming the attacker already had access. When…