WHY KUBERNETES RBAC MISCONFIGURATIONS ARE THE EASIEST PRIVILEGE ESCALATION YOU'LL EVER FIND

Summary from the TLDR DevOps newsletter

Recurring Kubernetes RBAC mistakes, cluster-admin bound to service accounts, wildcard permissions, over-broad secrets access, and stale bindings that never expire, drive most cluster compromises rather than novel vulnerabilities.