Tag: container
-
uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts
A rentable Android spyware kit called uCreator takes over Telegram and WeChat accounts by hiding its code inside working copies of the two apps, researcher Ovi found. It only reaches people who install one of these tampered copies, spread outside the official app stores, or who run WeChat inside the kit makers’ own container app.The…
-
LiteLLM Supply Chain Compromise Exposes AI Developer Credentials to Malware Attacks
Tags: ai, attack, authentication, cloud, container, credentials, cyber, malicious, malware, pypi, startup, supply-chainLiteLLM version 1.107.0 was compromised in a supply chain attack that distributed credential-stealing malware through PyPI wheels and container images. On October 21, 2026, researchers at Socket reported that malicious Python startup hooks could activate even if applications didn’t import LiteLLM, potentially exposing cloud credentials, developer secrets, and AI authentication files. Socket flagged seven malicious…
-
ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More
Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, it fits right in with this week’s security stories.The rest gets interesting in different ways. A small permission can lead to a big theft. A trusted login can hide the wrong person.…
-
10 Best Container Image Scanning Tools Compared (2026): Features Pricing
Trivy and Grype give every team a free scanning floor, Snyk developer workflows and Sysdig lead the platform lanes, and Chainguard attacks the problem upstream with zero-CVE bases. Ten distinct options (Grype and Anchore are one vendor) compared across OSS, platform, registry, native, and eliminate-the-problem lanes. Quick Verdict: Best Container Image Scanning at a Glance…
-
Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it found no evidence that anyone exploited it.The flaw was in the feature that converts a personal account into an organization,…
-
Docker Hub flaw let attackers impersonate users, tamper with images
Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user’s container repositories using a personal access token (PAT). First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/docker-hub-flaw-let-attackers-impersonate-users-tamper-with-images/
-
12 Best Software Supply Chain Security Tools Compared (2026): Features Pricing
Chainguard leads the eliminate-the-problem lane with hardened zero-CVE images, Sonatype the block-at-ingestion lane, and Scribe/Lineaje the provenance-attestation frontier. Selecting the best container registry security tools helps organizations establish baseline protection across four distinct attack surfaces dependencies, pipelines, artifacts, and base images because software supply chain security is a comprehensive strategy wearing a category name. Quick…
-
Cross-tenant data exposure – Cloudflare-Container gaben Datenreste fremder Kunden preis
First seen on security-insider.de Jump to article: www.security-insider.de/cloudflare-containers-sicherheitsluecke-datenreste-auslesbar-a-cbfeb9d28f7a7437a5583b4da98c551f/
-
Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes
Dell has released security updates to address multiple critical security flaws in Dell Container Storage Modules (CSM) that could be exploited by bad actors to take over susceptible systems.The vulnerabilities are listed below – CVE-2026-63688 (CVSS score: 10.0) – A missing authentication for critical function vulnerability in the csm-authorization-storage gRPC server that an First seen…
-
Dell asks admins to patch max severity CSM flaws as soon as possible
Dell has patched two maximum severity vulnerabilities in the Container Storage Modules (CSM) that connect Dell enterprise storage arrays to Kubernetes environments. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-max-severity-dell-csm-flaws-give-hackers-admin-privileges/
-
10 Best Container Registry Security Tools Compared (2026): Features Pricing
The best container registry security stack in 2026 starts free Harbor (CNCF registry with built-in scanning) and Grype/Trivy (open-source scanners) are production-grade at $0 with Snyk the best paid pick for developer-led remediation and Aqua/JFrog Xray the best enforcement graduations. Modern engineering teams evaluate these platforms alongside the 12 best container security tools compared for…
-
Docker CopyEscape CVE-2026-17106 Lets Malicious Containers Overwrite Host Files
A critical Docker vulnerability tracked as CVE-2026-17106, also known as CopyEscape, could allow a malicious container to overwrite files on the host machine when a user runs the `docker cp` command. This vulnerability affects copy-out operations, where Docker retrieves data from a container and extracts it onto the system running the Docker Command Line Interface…
-
Attackers Target Developer Credentials to Expand Supply Chain Intrusions Beyond Source Code
Software supply chain attacks are increasingly evolving into cloud identity breaches, as attackers weaponize trusted packages to steal credentials from developer workstations and CI/CD environments before an application is ever executed. The result is a dangerous pivot: a routine dependency installation can give threat actors access to cloud accounts, source-code repositories, container platforms, secrets-management systems,…
-
EU Cyber Resilience Act requirements for containers and Kubernetes
Starting in full force on”¯Dec. 10, 2024, the EU Cyber Resilience Act (CRA)”¯is a regulation (EU 2024/2847) that defines mandatory cybersecurity requirements for all products … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/30/rapidfort-cra-container-compliance/
-
EU Cyber Resilience Act requirements for containers and Kubernetes
Starting in full force on”¯Dec. 10, 2024, the EU Cyber Resilience Act (CRA)”¯is a regulation (EU 2024/2847) that defines mandatory cybersecurity requirements for all products … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/30/rapidfort-cra-container-compliance/
-
WSL containers are generally available on Windows
Microsoft made WSL containers generally available and shipped the feature with controls that let administrators switch it off or limit where it pulls images from. WSL … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/30/microsoft-wsl-containers-available/
-
Microsoft is rolling out Linux container support to WSL
Microsoft is taking Windows Subsystem for Linux beyond just running Linux distributions, as WSL Containers is now generally available. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-is-rolling-out-linux-container-support-to-wsl/
-
Cloudflare fixes Containers cross-tenant flaw exposing customer data
Cloudflare has fixed a vulnerability in Containers and Sandboxes that allowed customers with a Workers Paid account to recover residual data from other customers’ containers on the same physical host. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cloudflare-fixes-containers-cross-tenant-flaw-exposing-customer-data/
-
Windows 11 Update Causes Black Screen and Desktop Loading Issues After Sign-In
Microsoft has confirmed a Windows 11 issue that can leave users with a black screen after sign-in or prevent the desktop from loading automatically. The problem affects devices that installed the August 2026 non-security preview updates and potentially later cumulative updates, with Azure Virtual Desktop environments using FSLogix profile containers most frequently affected. The issue…
-
14-Year-Old Linux Kernel Vulnerability Enables Root Access and Docker Escape
A vulnerability in the Linux kernel’s AF_ALG cryptographic interface, which has existed for 14 years, can let an unprivileged local attacker gain root access and escape a Docker container by exploiting a race condition in concurrent socket writes. This flaw, tracked as CVE-2025-39964, was discovered in 2025 by STAR Labs researcher Muhammad Alifa Ramdhan, with…
-
14-Year-Old Linux Kernel Vulnerability Enables Root Access and Docker Escape
A vulnerability in the Linux kernel’s AF_ALG cryptographic interface, which has existed for 14 years, can let an unprivileged local attacker gain root access and escape a Docker container by exploiting a race condition in concurrent socket writes. This flaw, tracked as CVE-2025-39964, was discovered in 2025 by STAR Labs researcher Muhammad Alifa Ramdhan, with…
-
14-Year-Old Linux Kernel Vulnerability Enables Root Access and Docker Escape
A vulnerability in the Linux kernel’s AF_ALG cryptographic interface, which has existed for 14 years, can let an unprivileged local attacker gain root access and escape a Docker container by exploiting a race condition in concurrent socket writes. This flaw, tracked as CVE-2025-39964, was discovered in 2025 by STAR Labs researcher Muhammad Alifa Ramdhan, with…
-
AI-Powered CARBONATO Botnet Steals Credentials to Fund Its Own LLM Gateway
CARBONATO exploits exposed Docker daemons, installs an AI agent, steals API keys and spreads across networks with autonomous command execution. CARBONATO is a Docker-based botnet that has been active since at least October 2024. ThreatDown discovered the operation after finding an unauthenticated container registry exposed to the internet. The registry contained the attackers’ entire toolchain…
-
Cloudflare Fixes Flaw That Let One Container Read Another Customer’s Leftover Disk Data
A flaw in Cloudflare Containers let a paying customer read data that other customers’ containers had left behind on the same server, Cloudflare and the researchers who found it said on Thursday.The data came from disk space that earlier containers had used and given up, not from any live workload, and an attacker could not…
-
Cloudflare Containers Flaw Could Expose Data From Other Customers’ Workloads
Cloudflare has addressed a cross-tenant data exposure vulnerability in its Containers platform that could have allowed one customer’s workload to recover residual data belonging to other customers on the same infrastructure. This flaw also affected Cloudflare Sandboxes and the Browser Run service within Browser Rendering, both of which utilize the same underlying disk implementation. Cloudflare…
-
ALPSiX: Berliner Inter.link errichtet neuen Peeringknoten des DE-CIX in Südöstereich
Tags: containerDer neue Internetknoten ALPSiX in Klagenfurt-Villach setzt auf Edge-Container, um die Unabhängigkeit von Wien zu stärken und Daten direkt nach Norditalien, Bayern und auf den Balkan zu leiten. First seen on golem.de Jump to article: www.golem.de/news/alpsix-berliner-inter-link-errichtet-neuen-peeringknoten-des-de-cix-in-suedoestereich-2609-213224.html
-
12 Best Container Security Tools Compared (2026): Features Pricing
Quick Answer: Container security has the deepest free floor in the industry Trivy, Falco, and SUSE NeuVector (fully open-sourced) cover scan, runtime, and full-lifecycle at $0 so commercial spend must justify itself on enforcement and scale. Sysdig, Aqua, and Prisma bill per workload/node; Snyk bills per developer; Microsoft publishes per-vCore rates. The billable-unit choice changes…
-
Turn it off and on again, but for critical infrastructure
Researchers at KTH Royal Institute of Technology built a container replica of a segmented industrial network, attacked it repeatedly across 14 days of running time, and used … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/14/ot-intrusion-response-agent/
-
How JPMorgan Chase Scaled Secure Software Delivery
Centralized Controls Help the Bank Secure Thousands of Daily Software Builds. JPMorgan Chase centralized its container pipeline to support thousands of daily builds while detecting vulnerabilities before deployment. As AI agents accelerate coding, standardized scans, security reviews and detailed specifications help keep speed from introducing unacceptable risk. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/how-jpmorgan-chase-scaled-secure-software-delivery-a-32795