Stay secure with the latest insights on container security, trends, and best practices in information security for containerized applications.
Search across headline titles and summaries.
Background for this topic.
Containers package software and its dependencies into isolated units that run consistently across environments. They share the host operating system kernel but maintain separation through namespaces and control groups, enabling efficient resource use and rapid deployment. This isolation differs from full virtual machines by being more lightweight and portable.
Security concerns focus on container escape, where vulnerabilities allow attackers to break isolation and access the host system or other containers. Risks also arise from untrusted or outdated container images that may contain malware or vulnerabilities. Defenses include image scanning, minimal base images, runtime security monitoring, and strict access controls on container orchestration platforms to limit privilege escalation and lateral movement within containerized environments.
Cyberattackers are exploiting Docker instances to drop the bot-tastic 9hits Web traffic generator and "earn" valuable credits that can be turned into cash.
Discovered by Cado Security, the campaign deploys two containers to vulnerable Docker instances
GitHub rotated keys potentially exposed by a vulnerability patched in December that could let attackers access credentials within production containers via environment variables. [...]