Welcome to the blog page for ShakeyLabs LLC, a highly-technical security research shop. Things will be up and running here shortly, but you can subscribe in the meantime if you'd like to stay up to date and receive emails when new content is published!
We have a lot to share and are excited for our first homebrewed technical blog post diving into the security issues of an obscure but popular SAAS container.
Series of CVEs assigned to ingress-nginx GitHub - kubernetes/ingress-nginx: Ingress NGINX Controller for KubernetesIngress NGINX Controller for Kubernetes. Contribute to kubernetes/ingress-nginx development by creating an account on GitHub.GitHubkubernetes Last Update: 3/24 8:53 PM CST Post may be a bit rushed Patches have been released Releases
TLDR: Look for “ — extra-index-url” in your repositories. If you find any internal PIP dependencies installed with that parameter that are not already on PyPI, you’re probably vulnerable to high risk dependency confusion. I highly recommend looking for PIP dependency confusion vulnerabilities, especially in internal test systems. These test systems