Mom get the camera 📸
My lowest cve score to date :)
CVE-2025-4563: Nodes can bypass dynamic resource allocation authorization checks - github.com/kubernetes/kubern…
Our research is on @TheHackersNews
Go read >>
👀 New Linux Rootkit Exploits io_uring, Evades Detection
ARMO’s Curing rootkit uses io_uring to bypass system call monitoring—Falco, Tetragon, and even Microsoft Defender can’t see it.
Attackers can run commands without triggering system calls.
Read → thehackernews.com/2025/04/li…
Amit Schendel retweeted
Be smart and read @AmitSchendel
armosec.io/blog/armo-cadr-de…
CVE-2025-3248: Critical Code Injection Vulnerability in Langflow cvereports.com/cve-2025-3248…
Over 20,000 vulnerabilities found in WordPress plugins—insane! Every single day new vulnerabilities!
#WordPress
Amit Schendel retweeted
Fully recreated Wiz research CVE-2025-24514 and CVE-2025-1974 exploit🔥
I recommend reading this amazing research by @nirohfeld @sagitz_ @ronenshh and @hillai, It is really well done.
For everyone - Go patch!
Amit Schendel retweeted
Dubbed the “Ingress Nightmare”, there are four Ingress NGINX Controller for Kubernetes vulnerabilities, with a CVSS base score of 9.8, that need to be addressed:
@AmitSchendel has the technical analysis and step-by-step guide to making sure you're secure.
armosec.io/blog/kubernetes-i…
My talk about container escapes is up, go check it out.
youtu.be/2jBCYFFRH78?si=1yB8…
Amit Schendel retweeted
BREAKING NEWS 📢: The @CloudNativeFdn has promoted #Kubescape, created by ARMO, to incubation status.
Each and every star on GitHub, user, adopter, and contributor has made this possible, so thank you! 🙏🎉
Help us celebrate and spread the news ➡️ kubescape.io/blog/2025/02/25…
Amit Schendel retweeted
Super interesting
armosec.io/blog/kong-ingress…
Amit Schendel retweeted
#OWASP24 San Francisco is just around the corner and we will be there to bridge 🌉 your gap between APPSEC and CLOUDSEC 🐼
Don't miss our Security Researcher, @AmitSchendel, who will be presenting.
See you at Booth 510 😎
sf.globalappsec.org/
Amit Schendel retweeted
In this blog we introduce Thread-Name Calling - A new process injection technique using Thread Name. We also discuss various scenarios in which this not widely-known API can be used for offense.
research.checkpoint.com/2024…
Amit Schendel retweeted
Excited to publish a new report on a linux kernel eBPF vulnerability. CVE-2024-41003
github.com/google/security-r…
We found this (a month ago) with github.com/google/buzzer on a friday, had a RCA by monday, working LPE exploit on tuesday and reported it on wednesday.
Amit Schendel retweeted
🐝 eCHO News Episode 59 🐝
Cilium Case Studies
eBPF For The Next 10 Years
isogo.to/echo-news-59
Content from:
@parttimen3rd @vsoch @TomoyaFujita1 @AmitSchendel @TheObsGuy @ViktorMalikSK @KnoetzeGrant @gelopfalcon @TeodorJanez @raphink @TanelPoder @aantigua
Amit Schendel retweeted
🚨CVE ALERT: a high severity remote code execution (RCE) vulnerability has been found in OpenSSH’s server (CVE-2024-6387) by the research team of Qualys. Read on to to learn more about it:
hubs.la/Q02DY1r40
Amit Schendel retweeted
When and your bro flying on the same plane to a security conference @AmitSchendel
