Kevin Kirsche

Download Pentera Labs Report - revealing three new critical injection points in the ingress-nginx controller, building on Wiz’s IngressNightmare CVE. These overlooked vulnerabilities could let attackers hijack traffic, spoof headers, or reach unauthorized backend services - They exist in one of the most widely used ingress controllers in Kubernetes, putting countless environments at risk. This research highlights how small misconfigurations can lead to major exposure in modern cloud-native architectures. What’s Inside: ✅ 3 new injection vulnerabilities in ingress-nginx ✅ How attackers find and exploit CVEs in open source ✅ Actionable tips to secure your Kubernetes environment https://lnkd.in/eHtX6EdP

9

1 Comment

In this report, we break down how identity misconfigurations and excessive permissions quietly expose cloud environments you thought were safe. You may already have security tools in place but do they speak the language of leadership? Download the playbook to get clarity on: - Executive-level decision levers - True identity risk exposures - Principles you can use to drive board-level conversations https://okt.to/mzNdE7 #IdentitySecurity #CloudRisk #Microsoft365 #ExecutiveSecurity

13

1 Comment

Most AI breach stories start the same way: someone trusted their asset inventory a little too much. Meanwhile, the real villains slip in through identities, sessions, and split-second intent. Asset-centric thinking is yesterday’s memo. If your security can’t read the room and the intent, you’re basically letting the interns run prod. If AI is rewriting the threat landscape in real time, your defenses better think just as fast — or you’re already outdrawn. https://lnkd.in/dgG9QtrB

24

1 Comment

ZTNA gets you on the track - but it won't get you across the Zero Trust finish line. 🏁 It’s built for access control. Not for visibility. Not for threat prevention. Not policy enforcement. Winning the Zero Trust race takes a platform built to see and secure everything, adapt in real time and at full speed—no blind spots, no pit stops. Read the blog to see how to go the distance: 👉https://bit.ly/45bjYyo #ZeroTrust #SASE #CISOStrategy

52

Communicating identity security’s value isn’t always easy, but it’s critical. Our new guide for CISOs offers a practical framework to help security leaders gain executive buy-in by connecting identity to resilience, efficiency, and growth. Click through for five must-dos, and download the full playbook for more: https://slpnt.co/45zA2dk

118

4 Comments

🚫 Remediating every vulnerability isn’t realistic. So why keep trying? The key is prioritization. Our new blog explores how security teams are moving away from alert overload and toward risk-based decision making powered by AI, context, and automation. Learn how Veracode helps teams cut through the noise, eliminate critical security debt, and free up dev time with automated fixes and smarter triage. It’s time to move past traditional vulnerability management. 🔗 https://lnkd.in/e3CY8FMA

24