Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Researchers Find New Exploit Bypassing Patched NVIDIA Container Toolkit Vulnerability
Cybersecurity researchers have discovered a bypass for a now-patched security vulnerability in the NVIDIA Container Toolkit that could be exploited to break ou…
Fedora 41: containers-common 2025-908dfe95f6 Security Advisory Updates
Security fix for CVE-2024-11218 - fixed in buildah 1.38.1, podman 5.3.2 Automatic update for buildah-1.38.1-1.fc41, containers-common-0.61.1-1.fc41, podman-5.3…
Linux Container Security Primer
Agility and scalability are paramount for us Linux security admins, and traditional software deployment methods often fall short in these critical areas. Conta…
Ubuntu 7161-1: Docker Security Advisory Updates
Several security issues were fixed in Docker.
Understanding TeamTNTs Malicious Campaign Assaulting Docker Clusters
TeamTNT has recently emerged at the forefront of the ever-evolving threat landscape by devising novel exploits assaulting Docker clusters. Their Docker Gatling…
Debian LTS: DLA-3918-1: docker.io Security Advisory Updates
A vulnerability has been detected in the Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances.
New Cryptojacking Attack Targets Docker API to Create Malicious Swarm Botnet
Cybersecurity researchers have uncovered a new cryptojacking campaign targeting the Docker Engine API with the goal of co-opting the instances to join a malici…
Gentoo: GLSA-202409-29: Docker: Security Advisory Updates
Multiple vulnerabilities have been discovered in Docker, the worst of which could result in denial of service.
Critical NVIDIA Container Toolkit Vulnerability Could Grant Full Host Access to Attackers
A critical security flaw has been disclosed in the NVIDIA Container Toolkit that, if successfully exploited, could allow threat actors to break out of the conf…
Docker Engine Vulnerability Could Allow AuthZ Bypass
A serious security vulnerability in Docker Engine recently received a patch, compelling users to rush…Docker Engine Vulnerability Could Allow AuthZ Bypass on L…
The Future of Container Security: Trends and Open Source Tools to Watch
Containers are among the many recent inventions of modern computing. They have emerged as the cornerstone of software development and deployment. They isolate …
Docker Hub Services No More Available In Russia
Shortly after multiple users complained online about the unavailability of Docker Hub services, it’s now…Docker Hub Services No More Available In Russia on Lat…
Docker Hub Services No Longer Available In Russia
Shortly after multiple users complained online about the unavailability of Docker Hub services, it’s now…Docker Hub Services No Longer Available In Russia on L…
Millions of Malicious 'Imageless' Containers Planted on Docker Hub Over 5 Years
Cybersecurity researchers have discovered multiple campaigns targeting Docker Hub by planting millions of malicious "imageless" containers over the past five y…
Rust-Based Edera: Locking Down Container Security Once and For All
The Rust-based Edera project demonstrates a unique approach to container security that addresses cloud-native computing challenges. Let's examine this new, inn…
Docker, Hadoop, Confluence, Redis at Risk of New Cryptomining Attack
A recent attack campaign targeted publicly accessible Docker , Hadoop , Confluence, and Redis deployments. The attackers exploited misconfigurations and known …
RunC Container Escape Flaws Grant Attackers Host Access
A series of severe security vulnerabilities have been discovered in the popular runC command line tool. These vulnerabilities, collectively known as Leaky Vess…
SUSE: 2024:0441-1 moderate: kubevirt, virt-api-container, virt-control
* bsc#1218174 Affected Products: * Containers Module 15-SP5 * openSUSE Leap 15.5
SUSE: 2024:0442-1 important: cdi-apiserver-container, cdi-cloner-conta
Affected Products: * Containers Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5
Exposed Docker APIs Under Attack in 'Commando Cat' Cryptojacking Campaign
Exposed Docker API endpoints over the internet are under assault from a sophisticated cryptojacking campaign called Commando Cat."The campaign deploys a benign…
New Docker Malware Steals CPU for Crypto & Drives Fake Website Traffic
Vulnerable Docker services are being targeted by a novel campaign in which the threat actors are deploying XMRig cryptocurrency miner as well as the 9Hits View…
RedHat: RHSA-2023-5155:01 Moderate: [impact]: OpenShift Container Platform
Red Hat OpenShift Container Platform release 4.13.13 is now available with updates to packages and images that fix several bugs and add enhancements. This rele…
RedHat: RHSA-2023-5001:01 Moderate: OpenShift Container Platform 4.11.49
Red Hat OpenShift Container Platform release 4.11.49 is now available with updates to packages and images that fix several bugs and add enhancements. This rele…
RedHat: RHSA-2023-4898:01 Important: OpenShift Container Platform 4.10.67
Red Hat OpenShift Container Platform release 4.10.67 is now available with updates to packages and images that fix several bugs and add enhancements. This rele…