‘IngressNightmare’ Vulnerabilities Are A Kubernetes Emergency: Wiz CTO

Published on March 24, 2025

A series of critical zero-day vulnerabilities dubbed ‘IngressNightmare’ can enable full takeover of a Kubernetes cluster — and are ‘probably the most severe’ security issue to affect Kubernetes environments in recent years, Wiz CTO Ami Luttwak tells CRN.

Continue reading on website
Other news

Critical Ingress NGINX Controller Vulnerability Allows RCE Without Authentication

March 24, 2025
A set of five critical security shortcomings have been disclosed in the Ingress NGINX Controller for Kubernetes that could result in unauthenticated remote code execution, putting over 6,500 clusters at immediate risk by exposing the component to the public internet.The vulnerabilities (CVE-2025-24513, CVE-2025-24514, CVE-2025-1097, CVE-2025-1098, and CVE-2025-1974 ), assigned a CVSS score of

New VanHelsing ransomware targets Windows, ARM, ESXi systems

March 24, 2025
A new multi-platform ransomware-as-a-service (RaaS) operation named VanHelsing has emerged, targeting Windows, Linux, BSD, ARM, and ESXi systems. [...]