IngressNightmare: Analysis of Critical Vulnerabilities in Kubernetes Ingress NGINX Controller
Executive Summary On March 24, 2025, Wiz Research disclosed a series of critical vulnerabilities in...
Vulnerabilities
Stay ahead of cyber threats with our deep dives into software vulnerabilities. Explore technical breakdowns, CVE analysis, and expert remediation strategies.
Tackling the recent Kong ingress controller security incident with ARMO’s behavioral CADR
Imagine this situation: you recently updated one of your infrastructure software components. A few weeks...
Top cloud-native CVEs of 2024: A Comprehensive Recap
In 2024, several significant vulnerabilities were identified within the Kubernetes and broader cloud-native ecosystem. In...
The vulnerability puzzle: understanding base images and their relationship to CVEs
Have you ever heard of CVEs? Maybe not by their acronym, but Common Vulnerabilities and...
CVE-2024-7646: Ingress-NGINX Annotation Validation Bypass – A Deep Dive
Introduction Attention: a new Kubernetes vulnerability was uncovered by André Storfjord Kristiansen (@dev-bio on GitHub)...
CUPS: Unraveling a Critical Vulnerability Chain in Unix Printing Systems
A series of critical vulnerabilities has been uncovered in the Common Unix Printing System (CUPS),...
Yet another reason why the xz backdoor is a sneaky b@$tard
(We are talking about the xz/libzma backdoor identified with CVE-2024-3094) Summary of the OpenSSH XZ...
Bombshell in SSH servers! What CVE-2024-3094 means for Kubernetes users
Read our update: Yet another reason why the xz backdoor is a sneaky b@$tard On...
Under the hood of CVE patching
Addressing Common Vulnerabilities and Exposures, known as CVE patching, is a practice of applying updates...
Three new NGINX ingress controller vulnerabilities reported and how they affect Kubernetes
CVE-2023-5043, CVE-2023-5044 and CVE-2022-4886 can be exploited by attacker to steal secret credentials from the...
Kubelet vulnerabilities on Windows nodes: CVE-2023-3676, CVE-2023-3955 and CVE-2023-3893
Kubernetes security: three new interrelated vulnerabilities affecting the Windows versions of Kubelet and the Kubernetes...
Kubernetes vulnerabilities: 2023 roundup
Transparency in vulnerability disclosure plays a crucial role in effective risk management, regardless of software...
Continue as a guest