Rom Walton

Download Pentera Labs Report - revealing three new critical injection points in the ingress-nginx controller, building on Wiz’s IngressNightmare CVE. These overlooked vulnerabilities could let attackers hijack traffic, spoof headers, or reach unauthorized backend services - They exist in one of the most widely used ingress controllers in Kubernetes, putting countless environments at risk. This research highlights how small misconfigurations can lead to major exposure in modern cloud-native architectures. What’s Inside: ✅ 3 new injection vulnerabilities in ingress-nginx ✅ How attackers find and exploit CVEs in open source ✅ Actionable tips to secure your Kubernetes environment https://lnkd.in/eHtX6EdP

9

1 Comment

Download Pentera Labs Report - revealing three new critical injection points in the ingress-nginx controller, building on Wiz’s IngressNightmare CVE. These overlooked vulnerabilities could let attackers hijack traffic, spoof headers, or reach unauthorized backend services - They exist in one of the most widely used ingress controllers in Kubernetes, putting countless environments at risk. This research highlights how small misconfigurations can lead to major exposure in modern cloud-native architectures. What’s Inside: ✅ 3 new injection vulnerabilities in ingress-nginx ✅ How attackers find and exploit CVEs in open source ✅ Actionable tips to secure your Kubernetes environment https://lnkd.in/eHtX6EdP

6

1 Comment

Download Pentera Labs Report - revealing three new critical injection points in the ingress-nginx controller, building on Wiz’s IngressNightmare CVE. These overlooked vulnerabilities could let attackers hijack traffic, spoof headers, or reach unauthorized backend services - They exist in one of the most widely used ingress controllers in Kubernetes, putting countless environments at risk. This research highlights how small misconfigurations can lead to major exposure in modern cloud-native architectures. What’s Inside: ✅ 3 new injection vulnerabilities in ingress-nginx ✅ How attackers find and exploit CVEs in open source ✅ Actionable tips to secure your Kubernetes environment https://lnkd.in/eHtX6EdP

3

Most cloud security dashboards don’t fail because they miss data. They fail because they normalize risk. + Public buckets left “temporarily” open + IAM permissions that grow quietly over time + Security rules that look harmless… until they aren’t Everyone sees the alerts. No one clearly owns fixing them. That ownership gap is where incidents happen. We are building Shadow Phantom to flip this model. Not another detection layer but a remediation-first security platform. The focus isn’t more findings. It’s making risk actionable, owned and closed across security, platform and infra teams. Join the private beta: https://lnkd.in/eFkabAcR Invisible Security. Unstoppable Protection. #ShadowPhantom #CyberSecurity #BlindSpots #Misconfigurations #CloudSecurity #DevSecOps #SecurityOps

2

Anonymous access isn’t just a visibility problem. It’s a remediation problem. When identities go missing, risk spreads quietly across applications, APIs, and cloud environments. Axiler doesn’t just detect abnormal access; it remediates it automatically, closing gaps before they are exploited.

10

A mature security program isn’t defined by how fast it reacts. It’s defined by how predictably it handles vulnerabilities every time.

1

Patch management doesn’t have to be complicated when you know the right steps. Here’s a visual breakdown of how Patchifi simplifies the journey from vulnerability to remediation.🚀

11

Strong, pragmatic take on implementing ZTNA in hybrid work environments. The piece nails that zero-trust is an orchestration of identity, device posture and application-aware access, not a checkbox. Key takeaways: - Identity-first controls with MFA, SSO, and adaptive auth. - Device posture checks before access and ongoing telemetry. - App-aware, least-privilege access with micro-segmentation to limit blast radius. - SaaS security with DLP, CASB visibility, SSO signals and real-time risk-based mitigation. - Endpoint integration via FortiClient to reduce overhead while boosting assurance. Real-world impact: fewer VPN prompts, auditable access, rapid token revocation during audits, and a safer surface that remains usable for users. If your team is refreshing a hybrid security stack, this serves as a practical blueprint. Which area will you prioritise first in your org—identity, devices, or apps? #ZeroTrust #ZTNA #FortiGate #HybridWork #Security #CyberSecurity #IdentitySecurity #EndpointSecurity #SaaS

1

PIV credentials don’t fail at issuance — they fail when lifecycle management is ignored. UNIFYiA ensures PIV trust is continuously maintained, from issuance to renewal to revocation — aligned with NIST and FIPS standards. Because identity security is not a moment. It’s a lifecycle. www.unifyia.com #DigitalIdentity #PIV #ZeroTrust #Unifyia #IdentityLifecycle #PublicSectorSecurity

5

CVERiskPilot Beta 2.0 is live. We built CVERiskPilot to help security teams turn raw vulnerability exports into evidence-backed, reviewable remediation decisions without overstating certainty. Beta 2.0 includes: - Multi-tenant authenticated workflows - Uploads for JSON, SARIF, CSV, and XLSX - Findings triage and deep review - Remediation ticket workflows - Executive reporting - Billing and release-readiness foundations - Auditor-facing self-assessment and evidence-tracking views What matters most to us is trust: - Clear tenant isolation boundaries - Reviewable workflows - Advisory AI, not black-box automation - Evidence-oriented operations and release discipline This is still beta, and we’re treating it like beta: real workflows, real hardening, real feedback loops. If you lead vulnerability management, platform security, or security operations and want early access or want to help shape the product, we’d love to connect. #CyberSecurity #VulnerabilityManagement #AppSec #SecurityOperations #DevSecOps #SaaS #B2B #BetaLaunch

1