Public Preview: Agentless runtime vulnerability assessment for AKS-owned images (Microsoft Defender for Cloud)

Microsoft Defender for Cloud provides comprehensive runtime vulnerability assessment and guided remediation for vulnerable container images that are owned, maintained, and deployed by a cloud service, including those in Azure Kubernetes Service. Remediation may involve upgrading the AKS cluster version or reporting the issue to a specific service channel for vulnerabilities management.  

This new public preview capability allows users to distinguish AKS-owned images from customer-owned images, provides visibility into any CVEs in the AKS image, and provides recommendations on the AKS version or release containing the fixes for the vulnerabilities. 

Learn more.