Jari Salomaa

Download Pentera Labs Report - revealing three new critical injection points in the ingress-nginx controller, building on Wiz’s IngressNightmare CVE. These overlooked vulnerabilities could let attackers hijack traffic, spoof headers, or reach unauthorized backend services - They exist in one of the most widely used ingress controllers in Kubernetes, putting countless environments at risk. This research highlights how small misconfigurations can lead to major exposure in modern cloud-native architectures. What’s Inside: ✅ 3 new injection vulnerabilities in ingress-nginx ✅ How attackers find and exploit CVEs in open source ✅ Actionable tips to secure your Kubernetes environment https://lnkd.in/eHtX6EdP

9

1 Comment

Download Pentera Labs Report - revealing three new critical injection points in the ingress-nginx controller, building on Wiz’s IngressNightmare CVE. These overlooked vulnerabilities could let attackers hijack traffic, spoof headers, or reach unauthorized backend services - They exist in one of the most widely used ingress controllers in Kubernetes, putting countless environments at risk. This research highlights how small misconfigurations can lead to major exposure in modern cloud-native architectures. What’s Inside: ✅ 3 new injection vulnerabilities in ingress-nginx ✅ How attackers find and exploit CVEs in open source ✅ Actionable tips to secure your Kubernetes environment https://lnkd.in/eHtX6EdP

6

1 Comment

Download Pentera Labs Report - revealing three new critical injection points in the ingress-nginx controller, building on Wiz’s IngressNightmare CVE. These overlooked vulnerabilities could let attackers hijack traffic, spoof headers, or reach unauthorized backend services - They exist in one of the most widely used ingress controllers in Kubernetes, putting countless environments at risk. This research highlights how small misconfigurations can lead to major exposure in modern cloud-native architectures. What’s Inside: ✅ 3 new injection vulnerabilities in ingress-nginx ✅ How attackers find and exploit CVEs in open source ✅ Actionable tips to secure your Kubernetes environment https://lnkd.in/eHtX6EdP

3

Here’s a pattern I’m seeing more often: More sites. More assessments. More reporting expectations. Same headcount. Security teams are being asked to scale output without scaling structure. So what happens? Assessments become episodic. Reporting takes too long. Prioritization becomes subjective. And leaders spend more time translating risk than reducing it. This isn’t a capability issue. It’s an architecture issue. At some point, physical security has to operate with the same operational discipline as finance and IT. Otherwise it stays in permanent catch-up mode. For security people overseeing medium to large portfolios (20+ sites): What’s currently your biggest bottleneck volume, visibility, or validation? And why do you think this is?

5

1 Comment

Encryption has become the new compliance frontier. HIPAA, PCI DSS 4.0, GDPR, and NIS2 all now require encryption across clouds and hybrid environments. If your security still stops at the perimeter, it’s time to rethink your architecture. See how frameworks are converging around Zero Trust Maturity Model 2.0 and what that means for your architecture. 👉 https://loom.ly/3Wh7sLg Benson George #ZeroTrust #Encryption #Compliance #Aviatrix

7

Semperis Acquires MightyID: A Milestone for Identity Resilience Semperis’s acquisition of MightyID proves it: identity resilience isn't a 'nice-to-have' anymore. It’s the new standard for protecting your most critical assets from modern threats. 1) Identity systems, particularly Active Directory, are primary attack vectors and single points of failure. Specialized resilience measures are no longer optional. 2) True identity resilience extends beyond traditional backup and recovery to encompass proactive prevention, continuous detection, and rapid, intelligent restoration. 3) This acquisition signals increased investment and innovation in the IAM resilience space, pushing organizations to re-evaluate their current strategies and capabilities. Acsense empowers organizations to build and maintain comprehensive identity resilience. We provide deep visibility and continuous monitoring into your critical IAM infrastructure, ensuring you're always prepared for the unexpected. Dive deeper into what this acquisition means for your IAM strategy and learn why identity resilience is non-negotiable. https://lnkd.in/dgETPnZF #Acsense #IAM #IAMresilience #Cybersecurity #BusinessContinuity

4

One of the most actionable tips in Deepwatch’s new CISO 100 Days guide is simple but powerful: Executives don’t want dashboards. They want decisions. When reporting up: ✅ Translate alert tuning into reduced dwell time ✅ Tie detection improvements to uptime and customer trust ✅ Map telemetry to business systems, not log counts This is how security becomes a strategic function, not just a reactive one. 💡 Tip: Use “decision deltas” to anchor your board updates: What changed, why it mattered, and what action you took. #CISO

3

1 Comment