Yehuda Deutsch

Download Pentera Labs Report - revealing three new critical injection points in the ingress-nginx controller, building on Wiz’s IngressNightmare CVE. These overlooked vulnerabilities could let attackers hijack traffic, spoof headers, or reach unauthorized backend services - They exist in one of the most widely used ingress controllers in Kubernetes, putting countless environments at risk. This research highlights how small misconfigurations can lead to major exposure in modern cloud-native architectures. What’s Inside: ✅ 3 new injection vulnerabilities in ingress-nginx ✅ How attackers find and exploit CVEs in open source ✅ Actionable tips to secure your Kubernetes environment https://lnkd.in/eHtX6EdP

9

1 Comment

“It took 5 minutes to solve what we couldn’t for years.” Relay Network’s DevOps team didn’t need another tool that just flagged issues. They needed a fix for legacy IAM, SCP sprawl, and permissions chaos across AWS. With the Cloud Permissions Firewall, they: ✅ Disabled unused AWS regions ✅ Quarantined zombie resources ✅ Cleaned up years of policy sprawl in minutes 🌐 Hear it straight from Brendan Putek, Director of DevOps at Relay Network: https://lnkd.in/egw7MWkg Sonrai Security → 🤯 One-click least privilege. 😁 Zero disruption.

23

Master Kubernetes with LearnKube's Advanced Kubernetes workshop! What should you expect? - Learn how to architect and design clusters from the ground up (in the cloud or on-prem). - Explore the Kubernetes internal component and how the system is designed with resiliency in mind. - Deep-dive into the networking components and observe the packets flowing into the cluster. - Hands-on labs to test the theory with real-world scenarios! - And more. The next course starts in September: https://lnkd.in/ge4aYVZq We also run in-person courses and private training: https://lnkd.in/g9N3m-Xr

11

Infrastructure challenges only get harder after deployment. That's where Terraform actions bring real value. By standardizing more of your Day 2 workflows within the Terraform pipeline, you can confidently manage infrastructure over time without the manual overhead. A perfect example? Pairing Ansible with Terraform actions for seamless, automated infrastructure and configuration management. Ready to transform how you operate? https://bit.ly/3WKwCk6

54

Oligo Security 🤝 Endor Labs Modern teams ship code in minutes, but when security slows them down, developers skip the checks. The combination of Oligo and Endor Labs keeps the pipeline fast and secure -- by combining dev-time insights, runtime context, and real-time protection. 🔍 Endor Labs flags unsafe patterns before commit. 📊 Oligo adds runtime reachability and live SBOMs. 🔒 Together, we block exploits in prod and patch cleanly at the next build. Learn more at the link in the comments 👇 #AppSec #RuntimeSecurity #SoftwareSupplyChain

85

1 Comment

⚠️ Outages are where architectures tell the truth. FireHydrant's Signals rode through an AWS outage and failed over cleanly, keeping alerts flowing and escalations on track. Each alert runs as a durable Workflow in Temporal Cloud: resumable, observable, easy to reason about. Read the case study: https://lnkd.in/gPi6t4iP

69

Terraform users, this one might sting. If your Day 2 operations feel broken, it’s probably not your tools. It’s because Day 1 never actually happened. In a new article on DevOps.com, Eran Bibi explains why many FinOps, security, drift detection, and policy tools are working with incomplete cloud data. They assume you know what’s running in production. Most teams don’t. The result is fragile governance, drift that never really stops, and recovery plans built on infrastructure that was never codified. Day 2 tools can’t fix what you never fully discovered. 👉 Read the full article on DevOps.com: https://lnkd.in/gPGgRiGv #DevOps #Terraform #InfrastructureAsCode #PlatformEngineering #CloudOperations #CloudGovernance #SRE

16