Timothy Smith

Performance shouldn’t require proprietary hardware. Netgate TNSR leverages Vector Packet Processing (VPP), a modern, scalable packet processing engine designed for today’s data demands. - 100G+ throughput - Ultra-low latency - Scales directly with hardware - Cloud-ready and automation-friendly No ASIC lock-in. No bloated hardware refresh cycles. Just raw, software-powered performance. This is what next-generation routing looks like. Learn more: https://lnkd.in/dQ8YyQnC #Netgate #TNSR #VPP #Networking

14

Download Pentera Labs Report - revealing three new critical injection points in the ingress-nginx controller, building on Wiz’s IngressNightmare CVE. These overlooked vulnerabilities could let attackers hijack traffic, spoof headers, or reach unauthorized backend services - They exist in one of the most widely used ingress controllers in Kubernetes, putting countless environments at risk. This research highlights how small misconfigurations can lead to major exposure in modern cloud-native architectures. What’s Inside: ✅ 3 new injection vulnerabilities in ingress-nginx ✅ How attackers find and exploit CVEs in open source ✅ Actionable tips to secure your Kubernetes environment https://lnkd.in/eHtX6EdP

6

1 Comment

Ron Okopnik from Pentera Labs built on Wiz’s IngressNightmare research and discovered three previously undocumented injection points in Kubernetes’ ingress-nginx controller. These vectors go beyond the original four CVEs and give attackers the ability to bypass security controls, execute arbitrary code, and pivot deeper into Kubernetes clusters. Security teams need to think like attackers. This research helps them do exactly that. 👉 𝗥𝗲𝗮𝗱 𝗺𝗼𝗿𝗲 𝗼𝗻 𝗵𝗼𝘄 𝘁𝗵𝗲𝘀𝗲 𝗿𝗶𝘀𝗸𝘀 𝘂𝗻𝗳𝗼𝗹𝗱 𝗮𝗻𝗱 𝘄𝗵𝗮𝘁 𝘁𝗵𝗲𝘆 𝗺𝗲𝗮𝗻 𝗳𝗼𝗿 𝗞𝘂𝗯𝗲𝗿𝗻𝗲𝘁𝗲𝘀 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆: https://lnkd.in/dra7Ai-4 #Kubernetes #PenteraLabs #CloudSecurity

44

Radical simplicity 🤝 uncompromising security Zero Networks' solution is based on the idea that achieving comprehensive microsegmentation doesn't have to be hard. The EMA PRISM Report on Microsegmentation calls out a few key ways we're making segmentation simple for teams of every size: 📋 Automated Policy Creation and Provisioning, reducing manual errors and boosting efficiency 📖 Policy-Based Network Segmentation to govern how users and services interact ⚙️ Automated, Dynamic, and Predictive Management that ensures policies adapt in real time Find out how Zero Networks earned our ranking as a Platinum Leader in EMA's report ➡️ https://hubs.li/Q03zxf0d0 #Microsegmentation #Cybersecurity #ZeroNetworks #CISO #CIO #CTO

31

3 Comments

Wi‑Fi just got its “cloud moment” — and most IT roadmaps don’t reflect it yet. The FCC’s new 6 GHz geofenced variable power (GVP) rules aren’t a minor spec bump. They quietly created an outdoor‑grade, high‑power Wi‑Fi class that could make today’s networks look like 3G by 2027. Here’s the shift: instead of treating Wi‑Fi as an indoor, low‑power convenience layer, GVP turns the 6 GHz band into a software‑defined, location‑aware platform. Devices can dial power up or down (to ~24 dBm EIRP) while respecting licensed microwave links via geofenced exclusion zones. Why does this matter now? Wi‑Fi 8 hardware is landing this year, public comments are still shaping the rules, and early adopters will lock in coverage and cost advantages before everyone else realizes what changed. • Expect 2–3x faster, reliable outdoor Wi‑Fi for backyards, campuses, and warehouses as GVP‑ready routers and phones ship from Q2 2026. • By Q4 2026, AR/VR and IoT devices are forecast to run low‑latency navigation and automation at ~10x today’s effective ranges. • By 2027, estimates suggest ~80% of new US smart homes could be GVP‑ready, positioning the US as the global leader in unlicensed spectrum. The uncomfortable question: if your connectivity strategy still assumes “Wi‑Fi = indoors, 5 GHz = default,” what blind spots are you building into your next 3‑year plan? From a strategy perspective, this feels a lot like the early days of public cloud: skeptics focus on edge‑case risks, while quiet adopters redesign experiences (and OpEx) around a new baseline of capability. I’ve seen teams over‑invest in cabling and private LTE for problems GVP‑enabled Wi‑Fi may solve more flexibly. If you’re planning networks, products, or real estate, now is the time to reassess your 6 GHz roadmap. Drop your take in the comments, save this for your next infra review, and share with someone owning your 2026–2028 connectivity strategy. #WiFi6GHz #Connectivity #TelecomInnovation #SmartInfrastructure #ARVR Original Article: https://lnkd.in/gUwy_HhE

Raw telemetry can overwhelm more than it informs. That’s why organizations are leaning on PacketRanger to make SNMP and NetFlow practical, cost-effective, and compatible with modern monitoring tools. Three ways PacketRanger helps: 🔹 Filter Before You Forward – Keep dashboards meaningful and reduce data costs. 🔹 Translate for Compatibility – Convert SNMP traps into syslog for SIEMs and aggregators. 🔹 Spot Anomalies at the Source – Catch misconfigurations and outages in real time. When SNMP and NetFlow are implemented intentionally, they become powerful tools for clarity and control.

3

Most “redundant internet” designs fail during real outages. Not because SMBs bought the wrong bandwidth. Because they bought two circuits that share the same physical risk. Two providers can still mean: Same conduit Same street path Same upstream carrier Same neighborhood aggregation point True redundancy is about failure domain separation, not provider count. If you’re paying for dual circuits, it’s worth knowing whether you actually have redundancy — or just two invoices. NetZeal

3

Manual configuration doesn’t scale. Automation Fundamentals is the first release in the Arista Academy Automation track and is designed for engineers who want to understand automation workflows before diving into complex frameworks. Learn the building blocks behind automation and how tools, APIs, and workflows fit together in real networks, so you can automate with confidence, not guesswork. Start with Automation Fundamentals → https://bit.ly/4ovfbA7

286

3 Comments

You've deployed SD-WAN, but are you flying blind? Your network might look modern on paper, but without proper monitoring, you won't know there's a problem until VoIP calls drop mid-conversation and your critical SaaS apps grind to a halt. The reality check: ➡️ Even 1-2% packet loss can severely impact application performance ➡️ High jitter kills user experience faster than anything else ➡️ Without baseline metrics, you can't tell if performance issues are sudden spikes or gradual degradation you completely missed Without SD-WAN monitoring, you're stuck troubleshooting blind, unable to verify SLA compliance, wasting days on root cause analysis, and missing optimization opportunities because you can't measure what you can't see. Your SD-WAN is making routing decisions 24/7. Make sure you can actually see what's happening. 👇 https://lnkd.in/dVHCnM7y

16

1 Comment

🚀 New on Telemetry Now: Transforming raw data into insight 🎧 Flow logs are incredibly useful, but only if you can decipher their true meaning. This week on Telemetry Now, we delve into data enrichment in network observability: what it is, its importance, and how it converts raw telemetry into actionable insights. In this episode: 💪 What enrichment contributes to flow logs (consider: app names, regions, cloud metadata, and more) 🔎 Why contemporary networks—VXLAN, cloud, Kubernetes—require context for operability 🛠️ How Kentik enhances data at ingest for speed, scale, and high-cardinality queries 🤝 Use cases in performance troubleshooting, cloud cost management, security, and cross-team collaboration Whether you're operating in the cloud, on-premises, or somewhere in between, enriched flow data isn't just an option - it's your essential tool. 🎧 Listen now to discover how enriched telemetry provides the answers you need when you need them → https://gag.gl/dTOOqx

2

Network performance issues don’t stop at the edge of your VMware Cloud Foundation environment. But most monitoring tools do. Our new guide shows how Broadcom’s Network Observability service eliminates blind spots across SaaS, public cloud, and remote networks, helping teams quickly isolate the true source of performance issues and reduce MTTI. See real customer use cases and learn how to validate and accelerate your VCF transformations. Explore the guide below.

32

Cloud + network security just got unified 🫸💥🫷 Wiz and Check Point Software are bringing network context straight into the Security Graph. Here's what this means for you: CloudGuard firewall configurations now live alongside your cloud assets and risks in Wiz. You get complete visibility into which resources are protected and which are actually exposed to the internet. Wiz validates real exposure with our Dynamic Scanner. Check Point Infinity evaluates vulnerabilities and can apply virtual patching through CloudGuard IPS while your team remediates. One graph. Full context. Smarter prioritization. Live now for mutual customers. Full details: https://lnkd.in/d8guHKD9

744

5 Comments

Prelude’s September release includes a new routing algorithm that increased conversion performance by 2% worldwide, and an expanded anti-fraud pipeline featuring the new JA4 fingerprint signal for stronger protection and transparency.

22

🔗 In modern cloud environments, context is everything. With their new integration, Wiz and Check Point are unifying cloud risk with network defense—bringing firewall rules, protections, and topology directly into Wiz’s Security Graph. That means you can immediately see which vulnerabilities are already shielded and which remain exposed. This shared visibility drastically reduces friction between cloud and network teams. Rather than guesswork or siloed handoffs, the integration enables validated exposure analysis and safer remediation. When Check Point’s Infinity can automatically enforce protections like virtual patching, teams gain breathing room to remediate root causes without opening gaps. In short: combining cloud scanning with live network context turns risk noise into prioritized action. This kind of integrated defense is exactly what security operations need to scale with confidence—and with clarity. 🛡️ #CloudSecurity #NetworkDefense #IntegratedSecurity #Wiz #CheckPoint #ExposureManagement #CyberResilience #DevSecOps

3

For the first time, network equipment—particularly routers—has surpassed endpoints as the riskiest device category in enterprise IT networks. This shift is one of the key findings in Forescout Vedere Labs' latest Riskiest Connected Devices report, which analyzes millions of devices to uncover the most vulnerable targets. 🔑 Key Findings from the Report: ➡️ 12 new device types identified as significant threats, including Imaging Devices and Point of Sale (PoS) Systems ➡️ The retail and financial services sectors now host the riskiest devices, with healthcare and government industries following closely behind ➡️ Emerging vulnerabilities are at the forefront, with attackers exploiting new entry points across IT, OT, IoT, and IoMT devices Why should this matter to you? These findings reveal a shift in how cybercriminals are targeting networks—focusing on new devices and vulnerabilities. Is your organization prepared to tackle these evolving risks? 👉 Read more: https://lnkd.in/gepJSzDZ #Cybersecurity #RiskManagement #Forescout #VedereLabs #NetworkSecurity #DeviceSecurity #IoT #OT #IoMT #ThreatIntelligence

43

1 Comment

In this blog post for Kentik, Job Snijders and I dig into the problem of excessively large AS-SETs. Many of these route objects have grown out of control, defeating the purpose of this critical tool for IRR-based BGP route filtering. Includes data analysis from Ben Cartwright-Cox, founder of https://bgp.tools/

42

4 Comments