Docker

DockerSpy: Search for images on Docker Hub, extract sensitive information

September 11, 2024

DockerSpy scans Docker Hub for images and retrieves sensitive information, including authentication secrets, private keys, and other confidential data. “DockerSpy was …

RustScan: Open-source port scanner

August 7, 2024

RustScan is an open-source port scanner designed for speed and versatility. It combines a sleek interface with the power to adapt and improve over time. With RustScan’s …

Docker fixes critical auth bypass flaw, again (CVE-2024-41110)

July 25, 2024

A critical-severity Docker Engine vulnerability (CVE-2024-41110) may be exploited by attackers to bypass authorization plugins (AuthZ) via specially crafted API request, …

Portainer: Open-source Docker and Kubernetes management

July 1, 2024

Portainer Community Edition is an open-source, lightweight service delivery platform for containerized applications. It enables the management of Docker, Swarm, Kubernetes, …

New SOHO router malware aims for cloud accounts, internal company resources

May 2, 2024

Cuttlefish, a new malware family that targets enterprise-grade small office/home office (SOHO) routers, is used by criminals to steal account credentials / secrets for AWS, …

Be prepared to patch high-severity vulnerability in curl and libcurl

October 10, 2023

UPDATE (October 11, 2023, 07:15 a.m. ET): Curl v8.4.0 is out and fixes both CVE-2023-38545, a SOCKS5 heap buffer overflow vulnerability and CVE-2023-38546, a cookie injection …

Researchers find hidden vulnerabilities in hundreds of Docker containers

February 23, 2023

Rezilion uncovered the presence of hundreds of Docker container images containing vulnerabilities that are not detected by most standard vulnerability scanners and SCA tools. …

Python tarfile vulnerability affects 350,000 open-source projects (CVE-2007-4559)

September 22, 2022

Trellix Advanced Research Center published its research into CVE-2007-4559, a vulnerability estimated to be present in over 350,000 open-source projects and prevalent in …

Loft partners with Docker to help users manage virtual Kubernetes clusters

July 31, 2022

Loft Labs partners Docker so that Docker Desktop users can now set up and manage virtual Kubernetes clusters. Recently, Docker announced the launch of an extensions API …

Mirantis collaborates with Docker to accelerate application design and delivery for developers

June 5, 2022

Mirantis announced a partnership with Docker to make it easier for Docker Desktop users to quickly start a K0s Kubernetes cluster on the local desktop and use Lens, the …

HUB Security Docker Digital Twin authenticates and verifies incoming Docker traffic

December 17, 2021

HUB Security announced its Docker Digital Twin product to protect, authenticate, and verify traffic created by Docker, a highly used platform for package containment. The HUB …

CasaOS: Open-source home cloud based on the Docker ecosystem

December 13, 2021

For parents and families, the thought of someone gaining access to sensitive information can be nothing short of a nightmare. However, one group of developers are on a mission …