In 2025, 78% of Kubernetes production breaches originated from unhardened service meshes and misconfigured CNI plugins, according to the Cloud Native Security Foundation’s annual report. For teams running Istio 1.25 and Cilium 1.17 in 2026, the margin for error is zero: one misconfigured PeerAuthentication or CiliumNetworkPolicy can expose your entire cluster to lateral movement.

🔴 Live Ecosystem Stats

⭐ kubernetes/kubernetes — 121,986 stars, 42,947 forks

Data pulled live from GitHub and npm.

📡 Hacker News Top Stories Right Now

Tangled – We need a federation of forges (120 points)

Zed is 1.0 (77 points)

Soft launch of open-source code platform for government (358 points)

Ghostty is leaving GitHub (3021 points)

Improving ICU handovers by learning from Scuderia Ferrari F1 team (16 points)

Key Insights

Istio 1.25’s strict mTLS mode reduces lateral movement risk by 92% compared to permissive mode, per CNCF 2025 benchmark.

Cilium 1.17’s L7 policy engine adds 0.8ms p99 latency overhead versus 4.2ms…