Stay secure with the latest insights on container security, trends, and best practices in information security for containerized applications.
Search across headline titles and summaries.
Background for this topic.
Containers package software and its dependencies into isolated units that run consistently across environments. They share the host operating system kernel but maintain separation through namespaces and control groups, enabling efficient resource use and rapid deployment. This isolation differs from full virtual machines by being more lightweight and portable.
Security concerns focus on container escape, where vulnerabilities allow attackers to break isolation and access the host system or other containers. Risks also arise from untrusted or outdated container images that may contain malware or vulnerabilities. Defenses include image scanning, minimal base images, runtime security monitoring, and strict access controls on container orchestration platforms to limit privilege escalation and lateral movement within containerized environments.
Weekly headline count for the current query.
The rebuilt Chainguard platform adds deeper security designed to continuously reconcile open source artifacts across containers, libraries, agent skills, and GitHub Actions.
A kitchen-sink approach to building containers has loaded many with vulnerabilities. A handful of companies are trying to slim them down to address the issue.
Chainguard provides DevSecOps teams with a library of "secure-by-default" container images so that they don't have to worry about software supply chain vulnerabilities. The startup is expanding its focus to include Java and Linux, as well.
The attack is similar to previous campaigns by an actor called Commando Cat to use misconfigured APIs to compromise containers and deploy cryptocurrency miners.
A fix for a critical flaw in a tool allowing organizations to run GPU-accelerated containers released last year did not fully mitigate the issue, spurring the need to patch a secondary flaw to protect organizations that rely on NVIDIA processors for AI workloads.
Attackers are taking advantage of misconfigured containers to deploy cryptocurrency mining software.
The purported metadata for each these containers had embedded links to malicious files.
Misunderstanding the permissions of an authentication group in Google Kubernetes Engine (GKE) opens millions of containers to anyone with a Google account.
Cyberattackers are exploiting Docker instances to drop the bot-tastic 9hits Web traffic generator and "earn" valuable credits that can be turned into cash.
Kubernetes compromises have usually led to attackers creating cryptomining containers, but the outcomes could be much worse, say researchers presenting at the Black Hat Europe conference.
Several pieces of Black Hat USA research will explore container design weaknesses and escalation of privilege attacks that can lead to container escapes.
Cloud containers are increasingly part of the cybercrime playbook, with researchers flagging ongoing scanning for Docker weaknesses along with rapid exploitation to infect systems with coin-miners, denial-of-service tools, and ransomware.
Cloud workload protection delivers on the promise of zero trust for virtual machines, containers, and serverless architectures across the application life cycle.