#dockersecurity
LightNews LightNews
royans.bsky.social
CARBONATO: First AI‑Agent‑Driven Botnet Hijacki...

https://forkast.news/carbonato-is-the-first-botnet-where-the-command-and-control-engine-is-an-ai-agent-and-it-has-been-running-since-october-2024
https://flagthis.com/tldr/7998

##AIBotnet ##DockerSecurity ##LLMAbuse ##C2Evolution ##CredentialTheft
CARBONATO Is the First Botnet Where the Command-and-Control Engine Is an AI Agent — and It Has Been Running Since October 2024
ThreatDown discovered a Docker botnet that installs an unmodified open-source agent framework, overwrites its persona file, and uses stolen AI API keys to fund its own LLM gateway. Traditional C2 detection tools cannot see it.
forkast.news
September 27, 2026 at 5:34 PM
cybermaterial.bsky.social
Gogs Zero Day Hits Hundreds Of Servers
Read More: buff.ly/E5DaB2V

#Cybersecurity #CyberNews #ThreatIntel #Infosec #Malware #Vishing #ZeroDay #Exploit #Ransomware #DataBreach #EDRBypass #Shanya #DockerSecurity #SecretsLeak #NHS #Cl0p #MicrosoftTeams #SecurityUpdate
December 11, 2025 at 5:00 PM
hackernoon.com
A SOC2 audit exposed an old AWS key buried in a Docker layer, revealing root containers, a risky socket mount, and fixes that actually matter. #dockersecurity
The Audit That Found Our AWS Keys Sitting in a Docker Layer From Eight Months Ago
hackernoon.com
June 30, 2026 at 5:58 PM
hncompanion.com
Docker isn't a silver bullet for security. Running containers in `rootless` mode significantly reduces impact if a container is breached. Avoid `privileged` mode entirely, as it grants host-level access to the underlying system. #DockerSecurity 4/6
December 18, 2025 at 11:00 AM
cybernewsroom.bsky.social
CVE-2026-20896: Quick Probes on Gitea Docker Flaw Raise Alarms #CVE2026 #Gitea #DockerSecurity
CVE-2026-20896: Quick Probes on Gitea Docker Flaw Raise Alarms
CVE-2026-20896 shows threat actors probing Gitea Docker images just days after disclosure, raising privacy and security concerns for users.
cybernewsroom.xyz
July 6, 2026 at 5:47 PM
cybernewsroom.bsky.social
CVE-2026-20896: Gitea Docker's Flawed Trust Model Exposes Users to Attacks #CVE202620896 #Gitea #DockerSecurity
CVE-2026-20896: Gitea Docker's Flawed Trust Model Exposes Users to Attacks
CVE-2026-20896 reveals critical vulnerability in Gitea Docker images, demonstrating poor trust model and urgent need for remediation among users.
cybernewsroom.xyz
July 6, 2026 at 5:47 PM
cyfluencer.bsky.social
Heads up, Docker users! A new vulnerability in Docker Registry could expose your private images. 😱

Learn how to protect your containers and stay secure.

gbhackers.com/docker-regis...

#DockerSecurity #ContainerSecurity
Docker Registry Vulnerability Lets macOS Users Access Any Registry Without Authorization
A recently discovered vulnerability in Docker Desktop for macOS is raising concerns in the developer and security communities.
gbhackers.com
May 5, 2025 at 5:21 AM
cybermaterial.bsky.social
TeamPCP Worm Abuses Cloud To Build Botnets
Read More: buff.ly/rqd3TQN

#TeamPCP #CloudBotnet #React2Shell #DockerSecurity #KubernetesSecurity #CloudExploitation #CryptoMiningMalware #ThreatResearch
February 9, 2026 at 5:00 PM
cybermaterial.bsky.social
Docker Fixes Critical Ask Gordon AI Flaw
Read More: buff.ly/xwk2ZvN

#DockerSecurity #AIAppSec #AskGordon #CriticalVulnerability #SupplyChainSecurity #CloudSecurity #DevSecOps #PatchUpdate
February 5, 2026 at 6:01 PM
cybermaterial.bsky.social
Ukrainian Hacker Aids Russian Groups
Read More: buff.ly/NkKbD2v

#Cybersecurity #CyberNews #ThreatIntel #Infosec #Malware #Vishing #ZeroDay #Exploit #Ransomware #DataBreach #EDRBypass #Shanya #DockerSecurity #SecretsLeak #NHS #Cl0p #MicrosoftTeams
December 12, 2025 at 2:01 AM
cybermaterial.bsky.social
Australia Enforces Teen Social Media Ban
Read More: buff.ly/w8ztSXH

#Cybersecurity #CyberNews #ThreatIntel #Infosec #Malware #Vishing #ZeroDay #Exploit #Ransomware #DataBreach #EDRBypass #Shanya #DockerSecurity #SecretsLeak #NHS #Cl0p #MicrosoftTeams #SecurityUpdate
December 12, 2025 at 1:00 AM
cybermaterial.bsky.social
Teams Will Warn Of Suspicious Traffic
Read More: buff.ly/AQ9jfZy

#Cybersecurity #CyberNews #ThreatIntel #Infosec #Malware #Vishing #ZeroDay #Exploit #Ransomware #DataBreach #EDRBypass #Shanya #DockerSecurity #SecretsLeak #NHS #Cl0p #MicrosoftTeams #SecurityUpdate
December 11, 2025 at 11:00 PM
cybermaterial.bsky.social
Cl0p Ransomware Hits Barts Health Data
Read More: buff.ly/d6YY6dq

#Cybersecurity #CyberNews #ThreatIntel #Infosec #Malware #Vishing #ZeroDay #Exploit #Ransomware #DataBreach #EDRBypass #Shanya #DockerSecurity #SecretsLeak #NHS #Cl0p #MicrosoftTeams #SecurityUpdate
December 11, 2025 at 10:00 PM
cybermaterial.bsky.social
Over 10,000 Docker Images Leak Keys
Read More: buff.ly/Ox7Rd3i

#Cybersecurity #CyberNews #ThreatIntel #Infosec #Malware #Vishing #ZeroDay #Exploit #Ransomware #DataBreach #EDRBypass #Shanya #DockerSecurity #SecretsLeak #NHS #Cl0p #MicrosoftTeams #SecurityUpdate
December 11, 2025 at 9:00 PM
cybermaterial.bsky.social
Morton Drug Company Reports Data Breach
Read More: buff.ly/eSNfxQy

#Cybersecurity #CyberNews #ThreatIntel #Infosec #Malware #Vishing #ZeroDay #Exploit #Ransomware #DataBreach #EDRBypass #Shanya #DockerSecurity #SecretsLeak #NHS #Cl0p #MicrosoftTeams #SecurityUpdate
December 11, 2025 at 8:00 PM
cybermaterial.bsky.social
Ransom Gangs Use Shanya Packer To Hide
Read More: buff.ly/FErFwHa

#Cybersecurity #CyberNews #ThreatIntel #Infosec #Malware #Vishing #ZeroDay #Exploit #Ransomware #DataBreach #EDRBypass #Shanya #DockerSecurity #SecretsLeak #NHS #Cl0p #MicrosoftTeams #SecurityUpdate
December 11, 2025 at 6:00 PM
puretech.news
Docker could still be hosting a whole load of potentially malicious images - putting users at risk #Technology #Cybersecurity #DockerSecurity #Malware #UserSafety
Docker could still be hosting a whole load of potentially malicious images - putting users at risk
XZ-Utils backdoor was found over a year agoDespite warnings, some Linux images still contain itDebian won't budge as the images are
puretech.news
August 13, 2025 at 6:29 PM
jorgelaurel.com
Over 10,000 Docker Hub images were found exposing sensitive data like passwords and API keys, putting systems using them at serious risk of attack. This highlights weak security practices in shared code. #DockerSecurity
Over 10,000 Docker Hub images found leaking credentials, auth keys
More than 10,000 Docker Hub container images expose data that should be protected, including live credentials to production systems, CI/CD databases, or LLM model keys.
www.bleepingcomputer.com
December 11, 2025 at 11:05 AM
gotocon.com
One layer of security isn’t enough.
As @adrianmouat.com puts it - stack your defenses like Swiss cheese 🧀

Every layer might have holes.
Defense in Depth: Stack Your Security Like Swiss Cheese • @AdrianMouat
Check out the full version on our YouTube channel now! #GOTOcon #AdrianMouat #CharlesHumble #Chainguard #Cybersecurity #Security #Wolfi #SBOM #Containers #ContainerSecurity #Docker #DockerSecurity…
youtube.com
March 8, 2026 at 1:01 PM
bytetrending.bsky.social
Docker Security: Best Practices & Tips

Discover how to bolster your application's defenses against cyber threats with best practices for container security. Learn essential techniques for securing your environment and safeguarding sensitive data – vital steps for any DevOps team utilizing…
Docker Security: Best Practices & Tips
Discover how to bolster your application's defenses against cyber threats with best practices for container security. Learn essential techniques for securing your environment and safeguarding sensitive data – vital steps for any DevOps team utilizing container technology. #DockerSecurity
bytetrending.com
August 23, 2025 at 2:52 AM
bytetrending.bsky.social
Docker Security Best Practices & Tips

Unlock robust protection for your containerized applications with expert strategies for securing your infrastructure. Learn how to mitigate vulnerabilities and ensure a resilient environment – crucial for modern software development. #DockerSecurity
Docker Security Best Practices & Tips
Unlock robust protection for your containerized applications with expert strategies for securing your infrastructure. Learn how to mitigate vulnerabilities and ensure a resilient environment – crucial for modern software development. #DockerSecurity
bytetrending.com
August 21, 2025 at 7:39 PM
nimblenerd.social
Docker Disaster: Critical Flaw in Desktop App Exploits Windows Vulnerability!

Docker fixes a critical flaw in Docker Desktop that could let attackers break free from containers. Update to version 4.44.3 now! #DockerSecurity #CVE-2025-9074
thenimblenerd.com?p=1053913
Docker Disaster: Critical Flaw in Desktop App Exploits Windows Vulnerability!
Docker has issued a patch for a critical security flaw in Docker Desktop for Windows and macOS. The vulnerability, CVE-2025-9074, could let a malicious container gain unauthorized access to the host system. Remember, folks, even containers need boundaries—unless they're Tupperware, then stack away! Update to version 4.44.3 now.
thenimblenerd.com
August 25, 2025 at 7:23 PM
hugovalters.bsky.social
Mounting Docker socket in GitLab CI? DooD gives root host access—prime for escapes. Use DinD privileged or non-root runners. Mitigate now.

#DevSecOps #DockerSecurity #CISecur...

https://www.valtersit.com/vault/2026/04/gitlab_docker_executor/mount-docker-socket-for-dockerindocker-3f52fc/
May 2, 2026 at 2:06 PM
hugovalters.bsky.social
Custom Checkov policies for Docker. Because default security isn't enough for your "unique" compliance. Write more YAML. #DevSecOps #Checkov #DockerSecurity

https://www.valtersit.com/vault/2026/04/checkov_docker_security/checkov-docker-policy-pack-custom-development-and-test-126f82/
April 23, 2026 at 11:12 AM
hugovalters.bsky.social
Still only scanning Dockerfiles? Your runtime security is a joke. Scan the *built* image. Find the actual mess. #DockerSecurity #SupplyChain #Checkov

Intel: https://www.valtersit.com/vault/2026/04/checkov_docker_security/scan-local-docker-image-for-runtime-misconfigurations-a2351f/
April 8, 2026 at 1:29 PM