Devin Ertel

Download Pentera Labs Report - revealing three new critical injection points in the ingress-nginx controller, building on Wiz’s IngressNightmare CVE. These overlooked vulnerabilities could let attackers hijack traffic, spoof headers, or reach unauthorized backend services - They exist in one of the most widely used ingress controllers in Kubernetes, putting countless environments at risk. This research highlights how small misconfigurations can lead to major exposure in modern cloud-native architectures. What’s Inside: ✅ 3 new injection vulnerabilities in ingress-nginx ✅ How attackers find and exploit CVEs in open source ✅ Actionable tips to secure your Kubernetes environment https://lnkd.in/eHtX6EdP

6

1 Comment

Here’s a pattern I’m seeing more often: More sites. More assessments. More reporting expectations. Same headcount. Security teams are being asked to scale output without scaling structure. So what happens? Assessments become episodic. Reporting takes too long. Prioritization becomes subjective. And leaders spend more time translating risk than reducing it. This isn’t a capability issue. It’s an architecture issue. At some point, physical security has to operate with the same operational discipline as finance and IT. Otherwise it stays in permanent catch-up mode. For security people overseeing medium to large portfolios (20+ sites): What’s currently your biggest bottleneck volume, visibility, or validation? And why do you think this is?

5

1 Comment

Leveraging Splunk for Continuous Threat Monitoring & Response Threats don’t wait, and your security stack shouldn’t either. This piece breaks down how Splunk shifts teams from alert-chasing to real continuous monitoring, correlating signals in real time, prioritizing what actually matters, and automating response before attackers get a foothold. With RBA, enriched context, and SOAR-driven workflows, organizations gain the visibility and speed needed to spot threats earlier and contain them faster. It’s the difference between reacting to incidents… and stopping them before impact. 👉 Read: https://bit.ly/4ieFBUw From Reactive to Proactive: Continuous Threat Monitoring with Splunk and imagine your SecOps team operating with true 24/7 awareness and confidence. #Splunk #SecurityOps #RBA #SOAR #ThreatDetection #CyberDefense #Presidio

3

We all know the story: you finally get your logs into Splunk… and then spend hours untangling timestamps, sourcetypes, and formats that don’t line up. The reality? Broken data ingestion silently erodes threat detection. SOC teams lose visibility. Alerts misfire. Storage costs rise. That’s why Axoflow is heading to Splunk .conf25 in Boston. We’ll be sharing how we’ve tackled ingestion and parsing problems at scale, turning noisy, inconsistent logs into clean, structured, actionable data. Our team is ready to discuss real-world fixes for the problems that drain time and budget: Balázs Scheidler Sándor Guba Neil Boyd Mark Bonsack Laurakate Bayman If ingestion is still your bottleneck, what’s stopping you from fixing it upstream instead of in your SIEM? See you at .conf25. 🚀 #conf25 #splunk #SIEMOps #SOCWorkflows

23

2 Comments

Operationalizing Trust: Fixing the Broken Feedback Loop in Modern SOCs Is your security team chasing ghosts or hunting threats? The "swivel chair" workflow is costing you talent and money. Stop adding more tools and start fixing the broken feedback loop. Discover how to build a human-centric SOC for 2026. Link to the article: https://lnkd.in/dEds7SaQ #CyberSecurity #SOCBurnout #CISO

2