// LIVE

INTELCritical Citrix NetScaler memory flaw actively exploited in attacks

INTELTelnyx joins LiteLLM in latest PyPI package poisoning tied to Trivy breach

INTELStorm Brews Over Critical, No-Click Telegram Flaw

INTELFTC Action Against Match and OkCupid for Deceiving Users, Sharing Personal Data

INTELTeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Com

INTELHealthcare IT Platform CareCloud Probing Potential Data Breach

INTELSecurity updates for Monday

INTEL'When intelligence and trust move together, AI stops being an experiment and sta

INTELRussian APT Star Blizzard Adopts DarkSword iOS Exploit Kit

INTELDisclosure of Replay Attack Vulnerability in Signed References

INTELHackers now exploit critical F5 BIG-IP flaw in attacks, patch now

INTELTelnyx Targeted in Growing TeamPCP Supply Chain Attack

CVE(Pwn2Own) Canon imageCLASS MF654Cdw TTF Parsing Out-Of-Bounds Write Remote Code

CVEZDI-26-204: Canon imageCLASS MF654Cdw XPS Parser Vulnerability

CVEZDI-26-202: QNAP TS-453E Hyper Data Protector Plugin SQL Injection RCE Vulnerabi

INTELCritical Citrix NetScaler memory flaw actively exploited in attacks

INTELTelnyx joins LiteLLM in latest PyPI package poisoning tied to Trivy breach

INTELStorm Brews Over Critical, No-Click Telegram Flaw

INTELFTC Action Against Match and OkCupid for Deceiving Users, Sharing Personal Data

INTELTeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Com

INTELHealthcare IT Platform CareCloud Probing Potential Data Breach

INTELSecurity updates for Monday

INTEL'When intelligence and trust move together, AI stops being an experiment and sta

INTELRussian APT Star Blizzard Adopts DarkSword iOS Exploit Kit

INTELDisclosure of Replay Attack Vulnerability in Signed References

INTELHackers now exploit critical F5 BIG-IP flaw in attacks, patch now

INTELTelnyx Targeted in Growing TeamPCP Supply Chain Attack

CVE(Pwn2Own) Canon imageCLASS MF654Cdw TTF Parsing Out-Of-Bounds Write Remote Code

CVEZDI-26-204: Canon imageCLASS MF654Cdw XPS Parser Vulnerability

CVEZDI-26-202: QNAP TS-453E Hyper Data Protector Plugin SQL Injection RCE Vulnerabi

INTELLIGENCE SOURCE: Kubernetes Blog · 2026-03-25

Kubernetes v1.34 Enhances Cgroup Driver Autoconfiguration

— min read

·

GENERATED BY aria-32b

·

VIA Kubernetes Blog

#kubernetes #cgroup-driver #containerd #cri-o #ga-release

◎

ARIA ANALYSIS aria-32b · 2026-03-25

Kubernetes v1.34 introduces GA support for automated cgroup driver detection, easing configuration pain points while signaling deprecation of older containerd versions in future releases.

TL;DR

Kubernetes v1.34 introduces GA support for automated cgroup driver detection, easing configuration pain points while signaling deprecation of older containerd versions in future releases.

What happened

In Kubernetes v1.34, the feature gate KubeletCgroupDriverFromCRI is now GA, allowing kubelets to automatically determine and use the correct cgroup driver based on CRI implementation without manual configuration. This simplifies setup for Linux systems using containerd or CRI-O.

Why it matters for ops

This change addresses a long-standing issue where misconfigured cgroup drivers could cause silent failures in Kubernetes clusters. Automated detection ensures compatibility between kubelet and CRI, reducing errors and improving reliability.

Action items

Ensure your CRI implementation is updated to support KubeletCgroupDriverFromCRI feature gate.
Monitor the kubelet_cri_losing_support metric for nodes using containerd versions that will be deprecated in future Kubernetes releases.
Plan upgrades for containerd to v2.0 or later before upgrading to Kubernetes 1.36.

Source link

https://kubernetes.io/blog/2025/09/12/kubernetes-v1-34-cri-cgroup-driver-lookup-now-ga/

// SOURCES

Kubernetes Blog — Original article ↗