cyber.hendryadrian.com
Security News · darktrace.com

Darktrace 7.2 Adds Behavioral Runtime Security for Kubernetes

· Original article ↗

Summary

Darktrace says version 7.2 extends its HYBRID NETWORK platform to Kubernetes, monitoring network, process and control-plane activity with behavioral detection, risk context, forensic acquisition and workload-level response.

Key points

  • Darktrace says its Adaptive AI learns behavioral baselines for Kubernetes workloads, nodes and identities, then flags deviations without requiring predefined rules.
  • The announced monitoring covers network traffic, processes inside containers and activity against the Kubernetes API and control plane.
  • The platform can surface risky configurations, including privileged containers and host networking, and associate image CVEs with workloads running them.
  • Darktrace says response can block connections at the pod level, either autonomously or through a configurable human-in-the-loop process.
  • Forensic acquisition can be triggered by an analyst or an alert to preserve evidence from short-lived containers.
  • The company says it correlates Kubernetes activity with surrounding cloud identities, network activity and assets, and supports deployment across cloud and on-premises environments.

Article Details

Event Type
Product capability announcement: Darktrace describes Kubernetes runtime security features for Darktrace / HYBRID NETWORK.
Impact
The article says the product extends behavioral monitoring, detection, response, and forensic acquisition to Kubernetes workloads, with the aim of improving visibility into runtime activity and preserving evidence from ephemeral containers. These are vendor-described capabilities; the article does not report a specific incident or measured security outcome.

CVE

CVE-2025-23266NVIDIA · Container Toolkit[4] NVIDIAScape (CVE-2025-23266), CVSS 9.0. https://nvidia.custhelp.com/app/answers/detail/a_id/5659CVE-2025-31133Linuxfoundation · Runc[3] runC container-escape vulnerabilities (CVE-2025-31133, CVE-2025-52565, CVE-2025-52881), disclosed by a SUSE researcher on November 5, 2025.CVE-2025-52565Linuxfoundation · Runc[3] runC container-escape vulnerabilities (CVE-2025-31133, CVE-2025-52565, CVE-2025-52881), disclosed by a SUSE researcher on November 5, 2025.CVE-2025-52881Linuxfoundation · Runc[3] runC container-escape vulnerabilities (CVE-2025-31133, CVE-2025-52565, CVE-2025-52881), disclosed by a SUSE researcher on November 5, 2025.

Vendors

DarktraceWith the release of Darktrace 7.2, Darktrace / HYBRID NETWORK can extend behavioral security into Kubernetes, delivering visibility, detection and response capabilities across runtime activity. Darktrace addresses the

Products

Darktrace / HYBRID NETWORKWith the release of Darktrace 7.2, Darktrace / HYBRID NETWORK can extend behavioral security into Kubernetes, delivering visibility, detection and response capabilities across runtime activity. Darktrace addresses theKubernetesKubernetes has become a foundational technology for modern cloud-native infrastructure. It can orchestrate everything from customer-facing applications to data pipelines and, increasingly, AI workloads. This is due to

Related Articles