Three New High-Severity Vulnerabilities in runc: What You Need to Know
Within 24 hours, three new high-severity vulnerabilities were disclosed in runc, the low-level runtime that...
K8s Vulnerabilities
ARMO Monthly Product Roundup – November 2025
Hi there,We’ve just dropped a fresh batch of updates to help you cut through the...
IngressNightmare: Analysis of Critical Vulnerabilities in Kubernetes Ingress NGINX Controller
Executive Summary On March 24, 2025, Wiz Research disclosed a series of critical vulnerabilities in...
Tackling the recent Kong ingress controller security incident with ARMO’s behavioral CADR
Imagine this situation: you recently updated one of your infrastructure software components. A few weeks...
Top cloud-native CVEs of 2024: A Comprehensive Recap
In 2024, several significant vulnerabilities were identified within the Kubernetes and broader cloud-native ecosystem. In...
The vulnerability puzzle: understanding base images and their relationship to CVEs
Have you ever heard of CVEs? Maybe not by their acronym, but Common Vulnerabilities and...
CVE-2024-7646: Ingress-NGINX Annotation Validation Bypass – A Deep Dive
Introduction Attention: a new Kubernetes vulnerability was uncovered by André Storfjord Kristiansen (@dev-bio on GitHub)...
CUPS: Unraveling a Critical Vulnerability Chain in Unix Printing Systems
A series of critical vulnerabilities has been uncovered in the Common Unix Printing System (CUPS),...
Yet another reason why the xz backdoor is a sneaky b@$tard
(We are talking about the xz/libzma backdoor identified with CVE-2024-3094) Summary of the OpenSSH XZ...
Bombshell in SSH servers! What CVE-2024-3094 means for Kubernetes users
Read our update: Yet another reason why the xz backdoor is a sneaky b@$tard On...
Under the hood of CVE patching
Addressing Common Vulnerabilities and Exposures, known as CVE patching, is a practice of applying updates...
Three new NGINX ingress controller vulnerabilities reported and how they affect Kubernetes
CVE-2023-5043, CVE-2023-5044 and CVE-2022-4886 can be exploited by attacker to steal secret credentials from the...
Continue as a guest