Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
Tod Beardsley (todb@infosec.exchange)'s status on Tuesday, 25-Mar-2025 10:02:13 JST Tod Beardsley

There's going to be a lot of confused attackers and scanners over the next couple days.
More: https://www.runzero.com/blog/ingress-nightmare/
In conversation about 2 months ago from infosec.exchange permalink
Attachments
1. The Dude, aka the Little Lebowski, and Mr. Lebowski, aka the Big Lebowski, discussing what should happen about The Dude's rug, which is also pictured, and really ties the meme together. The Dude is labelled as Ingress-NGINX, which is the actually vulnerable component, and Mr. Lebowski is labelled as NGINX-Ingress, which is a different thing and this not affected by the rug, labelled CVE-2025-1974.
  https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/220/323/770/331/037/original/68a2944eb603f349.png
2. Domain not in remote thumbnail source whitelist: www.runzero.com
  
  How to find Kubernetes Ingress-NGINX Controller installations on your…
  
  from @runzeroinc
  
  On March 24th, Wiz and Kubernetes disclosed a pre-authentication remote code execution attack chain. Here's how to find Ingress-NGINX controller…
- Embed this notice
  Evan Prodromou (evan@cosocial.ca)'s status on Tuesday, 25-Mar-2025 10:02:12 JST Evan Prodromou
  in reply to
  
  @todb Hey, nice hat!
  
  In conversation about 2 months ago permalink
- Embed this notice
  Evan Prodromou (evan@cosocial.ca)'s status on Tuesday, 25-Mar-2025 10:07:20 JST Evan Prodromou
  in reply to
  
  @todb also, this sucks.
  
  In conversation about 2 months ago permalink

Public

Conversation

Notices

Feeds