New Argo CD Bug Could Let Hackers Steal Secret Info from Kubernetes Apps | allinfosecnews.com

Feb. 7, 2022, 3:30 a.m. | noreply@blogger.com (Ravie Lakshmanan)

The Hacker News thehackernews.com

Users of the Argo continuous deployment (CD) tool for Kubernetes are being urged to push through updates after a zero-day vulnerability was found that could allow an attacker to extract sensitive information such as passwords and API keys.
The flaw, tagged as CVE-2022-24348 (CVSS score: 7.7), affects all versions and has been addressed in versions 2.3.0, 2.2.4, and 2.1.9. Cloud security firm

apps argo argo cd bug cd hackers kubernetes

More from thehackernews.com / The Hacker News

AI Company Hugging Face Notifies Users of Suspected Unauthorized Access 1 day, 4 hours ago | thehackernews.com

access advisory artificial artificial intelligence +9

Mysterious Cyber Attack Took Down 600,000+ Routers in the U.S. 1 day, 18 hours ago | thehackernews.com

access attack bricked cyber +12

Microsoft Warns of Surge in Cyber Attacks Targeting Internet-Exposed OT Devices 1 day, 21 hours ago | thehackernews.com

attacks critical critical systems cyber +18

Beyond Threat Detection – A Race to Digital Security 2 days ago | thehackernews.com

attack attack surface benefits beyond +15

Russian Hackers Target Europe with HeadLace Malware and Credential Harvesting 2 days, 1 hour ago | thehackernews.com

actor apt28 bear blizzard +24

OpenAI, Meta, TikTok Disrupt Multiple AI-Powered Disinformation Campaigns 2 days, 3 hours ago | thehackernews.com

abuse ai-powered artificial artificial intelligence +21

CISA Alerts Federal Agencies to Patch Actively Exploited Linux Kernel Flaw 2 days, 17 hours ago | thehackernews.com

actively exploited agency alerts bug +34

FlyingYeti Exploits WinRAR Vulnerability to Deliver COOKBOX Malware in Ukraine 2 days, 19 hours ago | thehackernews.com

access actor anxiety called +20

Cyber Espionage Alert: LilacSquid Targets IT, Energy, and Pharma Sectors 2 days, 20 hours ago | thehackernews.com

access actor alert asia +23

CyberSOC Technical Lead

@ Integrity360 | Sandyford, Dublin, Ireland

View on infosec-jobs.com

Cyber Security Strategy Consultant

@ Capco | New York City

View on infosec-jobs.com

Cyber Security Senior Consultant

@ Capco | Chicago, IL

View on infosec-jobs.com

Sr. Product Manager

@ MixMode | Remote, US

View on infosec-jobs.com

Security Compliance Strategist

@ Grab | Petaling Jaya, Malaysia

View on infosec-jobs.com

Cloud Security Architect, Lead

@ Booz Allen Hamilton | USA, VA, McLean (1500 Tysons McLean Dr)

View on infosec-jobs.com