Stay secure with the latest insights on container security, trends, and best practices in information security for containerized applications.
Search across headline titles and summaries.
Background for this topic.
Containers package software and its dependencies into isolated units that run consistently across environments. They share the host operating system kernel but maintain separation through namespaces and control groups, enabling efficient resource use and rapid deployment. This isolation differs from full virtual machines by being more lightweight and portable.
Security concerns focus on container escape, where vulnerabilities allow attackers to break isolation and access the host system or other containers. Risks also arise from untrusted or outdated container images that may contain malware or vulnerabilities. Defenses include image scanning, minimal base images, runtime security monitoring, and strict access controls on container orchestration platforms to limit privilege escalation and lateral movement within containerized environments.
Weekly headline count for the current query.
Three newly disclosed vulnerabilities in the runC container runtime used in Docker and Kubernetes could be exploited to bypass isolation restrictions and get access to the host system. [...]
Cybersecurity professionals and researchers can now launch Kali Linux in a virtualized container on macOS Sequoia using Apple's new containerization framework. [...]
Microsoft has released emergency Windows Server updates to address a known issue preventing Windows containers from launching. [...]
A novel Linux Kernel cross-cache attack named SLUBStick has a 99% success in converting a limited heap vulnerability into an arbitrary memory read-and-write capability, letting the researchers elevate privileges or escape containers. [...]
Four vulnerabilities collectively called "Leaky Vessels" allow hackers to escape containers and access data on the underlying host operating system. [...]
GitHub rotated keys potentially exposed by a vulnerability patched in December that could let attackers access credentials within production containers via environment variables. [...]
A cyberattack on international logistics firm DP World Australia has severely disrupted the regular freight movement in multiple large Australian ports. [...]
Cisco has addressed a zero-day vulnerability in its IOS XR router software that allowed unauthenticated attackers to remotely gain access to Redis instances running in NOSi Docker containers. [...]
Amazon Web Services (AWS) has fixed four security issues in its hot patch from December that addressed the critical Log4Shell vulnerability (CVE-2021-44228) affecting cloud or on-premise environments running Java applications with a vulnerable version of the Log4j logging library or containers. [...]