An Ode to the Unsung Heroes of Kubernetes

An Ode to the Unsung Heroes of Kubernetes

Last year we celebrated the 10th anniversary of Kubernetes. Serving as the foundation for modern container orchestration and cloud native computing, Kubernetes has grown from its small beginnings into a large ubiquitous project supported by a thriving global community. Thirty-three releases later and, as KubeCon approaches, it’s an opportune time to not only celebrate the project’s remarkable growth and new features, but also to recognize the, n…

Critical vulnerabilities put Kubernetes environments in jeopardy

Wiz researchers warned that several CVEs in Ingress NGINX Controller for Kubernetes make nearly half of all cloud environments at risk of takeover.

IngressNightmare: Critical Kubernetes Flaws Put 6,500+ Clusters At Risk

Five critical security vulnerabilities have been found in the Ingress NGINX Controller for Kubernetes, potentially enabling unauthenticated remote code execution. This exposure puts over 6,500 clusters at immediate risk by making the component accessible via the public internet.  The vulnerabilities, CVE-2025-1097, CVE-2025-1098, CVE-2025-24514 and CVE-2025-1974, are a series of unauthenticated Remote Code Execution vulnerabilities in [...]

Attackers can cause multiple vulnerabilities in NGINX Controller for Kubernetes and execute malicious code. Updates are available.

Several security devices enable remote control of Kubernetes clusters. In Germany, more than 1,000 systems are affected. (Security unit, security)

Detecting and Mitigating IngressNightmare – CVE-2025-1974

On Monday, March 24, 2025, a set of critical vulnerabilities affecting the admission controller component of the Ingress NGINX Controller for Kubernetes was announced. In total, five vulnerabilities were announced; the m…