PJ Kirner

Download Pentera Labs Report - revealing three new critical injection points in the ingress-nginx controller, building on Wiz’s IngressNightmare CVE. These overlooked vulnerabilities could let attackers hijack traffic, spoof headers, or reach unauthorized backend services - They exist in one of the most widely used ingress controllers in Kubernetes, putting countless environments at risk. This research highlights how small misconfigurations can lead to major exposure in modern cloud-native architectures. What’s Inside: ✅ 3 new injection vulnerabilities in ingress-nginx ✅ How attackers find and exploit CVEs in open source ✅ Actionable tips to secure your Kubernetes environment https://lnkd.in/eHtX6EdP

9

1 Comment

Download Pentera Labs Report - revealing three new critical injection points in the ingress-nginx controller, building on Wiz’s IngressNightmare CVE. These overlooked vulnerabilities could let attackers hijack traffic, spoof headers, or reach unauthorized backend services - They exist in one of the most widely used ingress controllers in Kubernetes, putting countless environments at risk. This research highlights how small misconfigurations can lead to major exposure in modern cloud-native architectures. What’s Inside: ✅ 3 new injection vulnerabilities in ingress-nginx ✅ How attackers find and exploit CVEs in open source ✅ Actionable tips to secure your Kubernetes environment https://lnkd.in/eHtX6EdP

6

1 Comment

Download Pentera Labs Report - revealing three new critical injection points in the ingress-nginx controller, building on Wiz’s IngressNightmare CVE. These overlooked vulnerabilities could let attackers hijack traffic, spoof headers, or reach unauthorized backend services - They exist in one of the most widely used ingress controllers in Kubernetes, putting countless environments at risk. This research highlights how small misconfigurations can lead to major exposure in modern cloud-native architectures. What’s Inside: ✅ 3 new injection vulnerabilities in ingress-nginx ✅ How attackers find and exploit CVEs in open source ✅ Actionable tips to secure your Kubernetes environment https://lnkd.in/eHtX6EdP

3

Keeping your #software supply chain safe starts with what you bring in. JFrog Curation helps teams automatically vet open-source packages before they enter your environment—catching malicious, vulnerable, or non-compliant components early. The result? Cleaner builds, fewer surprises, and more confidence in every release. #OpenSource

2

Stop switching tabs. Start shipping verified artifacts. JFrog is officially live on the Cursor Marketplace! You can now bring JFrog’s #SoftwareSupplyChain security directly into your AI-native IDE. Ask Cursor to check for vulnerabilities, and it will use JFrog's verified security data to analyze your code and recommend precise remediation. 🛠️ Install now: https://lnkd.in/gUZUP-2d #CursorAI #DevSecOps #AI

130

Cloud + network security just got unified 🫸💥🫷 Wiz and Check Point Software are bringing network context straight into the Security Graph. Here's what this means for you: CloudGuard firewall configurations now live alongside your cloud assets and risks in Wiz. You get complete visibility into which resources are protected and which are actually exposed to the internet. Wiz validates real exposure with our Dynamic Scanner. Check Point Infinity evaluates vulnerabilities and can apply virtual patching through CloudGuard IPS while your team remediates. One graph. Full context. Smarter prioritization. Live now for mutual customers. Full details: https://lnkd.in/d8guHKD9

745

5 Comments

Deploy first and harden later... That is fundamentally backwards. Pioneer starts with: STIG-aligned builds Hardened Kubernetes Supply chain validation SBOM generation Security is not a phase. It is the foundation.

4

1 Comment

There is no easy way to protect against some of the tactics the bad actors are using to breach #Utilities , #EmergencyServices , #Retail #Airlines etc. They are using all avenues from phishing, bribing or compromising individuals with access to get them in. Once in they are sitting there watching how organisations function noting how often backups are done and what their cycles are before making their move. This is why, now more than ever, you keep track over who has access to what, across all of your estate. This will help to better understand your risk as much as possible and assist with Zero Trust Access as well as adding some additional road bumps for the attackers. #ZeroTrust #UserAccessReviews #UserAccess #IdentityGovernance #IdentityManagement #IdentityGovernance #Accessmanagement #CIO #CISO #CyberSecurity #DataSecurity #Risk #KnowledgeGraph #DigitalTwin #IdentityGraph #IAM #IdentitySecurity #Identity #Gathid #IAM #cyberdefense #operationaltechnology #criticalinfrastructure

5