--- title: Security breach description: Microsoft exposes attacks to Kubeflow deployments. Hackers accessed exposed Kubeflow dashboards launching malicious code to mine crytocurrencies. url: https://canonical.com/blog/kubeflow-security-breach?format=md --- 1. [Blog](https://canonical.com/blog) 2. Article --- [Rui Vasconcelos](https://canonical.com/blog/author/ruivasconcelos "More about Rui Vasconcelos") 12 June 2020 # Security breach [Kubeflow News](https://canonical.com/blog/tag/kubeflow-news) --- Share the article ### Microsoft exposes attacks to Kubeflow deployments Microsoft publishes report detailing series of attacks against clusters running Kubeflow with the purpose of mining cryptocurrencies. To ensure that you are on the safe side, follow the steps below: 1. When deploying Kubeflow, make sure that its dashboard isn’t exposed to the internet: check the type of the Istio ingress service by the following command and make sure that it is not a load balancer with a public IP: ***kubectl get service istio-ingressgateway -n istio-system*** 2. Verify that the malicious container is not deployed in the cluster, through the following command: ***kubectl get pods –all-namespaces -o jsonpath=”{.items[\*].spec.containers[\*].image}”  | grep -i ddsfdfsaadfs*** Find out more about this news – [ZDNet](https://www.zdnet.com/article/microsoft-discovers-cryptomining-gang-hijacking-ml-focused-kubernetes-clusters/), [threatpost](https://threatpost.com/kubernetes-cryptomining-machine-learning-framework/156481/) [Get in touch Interested in running Ubuntu in your organization?](https://ubuntu.com/about/contact-us/form) ## Sign up for our newsletter Get the latest Canonical news and updates in your inbox. Work email: \*I agree to receive information about Canonical's products and services. By submitting this form, I confirm that I have read and agree to [Canonical's Privacy Policy](https://canonical.com/legal/dataprivacy). Sign up ## Share on --- ## Related posts [### Kubeflow operations guide](https://canonical.com/blog/kubeflow-operations-guide) Operating MLOps stacks alike Kubeflow in an increasingly multi-cloud world will be a key topic as this market and Kubernetes adoption grow. Kubeflow operations webinar To... [Andreea Munteanu](https://canonical.com/blog/author/munteanuandreea) 17 March 2021 [### Latest community videos](https://canonical.com/blog/latest-kubeflow-videos) MLOps community jewels The MLOps community continues to grow and gift us with great content and discussions around the topic! Here are a couple of interesting discussions – a... [Rui Vasconcelos](https://canonical.com/blog/author/ruivasconcelos) 8 March 2021 [### Still figuring out what is Kubeflow?](https://canonical.com/blog/kubeflow-learn-understand) Kubeflow has become quite popular in the MLOps community as the tool that enables data science teams to automate their workflows from data preprocessing to model deployment on... [Andreea Munteanu](https://canonical.com/blog/author/munteanuandreea) 22 February 2021 [### SageMaker and Kubeflow: end-to-end ML workflows](https://canonical.com/blog/sagemaker-and-kubeflow) In June 2020, AWS introduced SageMaker components for Kubeflow. 6 months later, Antje Barth, Sr. developer advocate @AWS, presents how to build end-to-end ML workflows with... [Rui Vasconcelos](https://canonical.com/blog/author/ruivasconcelos) 11 February 2021