4 verified briefings on Containers. Each story includes a plain-English summary, why it matters, and the concrete action engineering teams should take.
Security firm Minimus released two new tools to help teams manage software supply chain risks and container security together. The products aim to simplify protecting applications from third-party code vulnerabilities and misconfigurations.
As Docker and Kubernetes become standard for modern infrastructure, attackers are developing sophisticated new methods to compromise them. Research highlights a growing trend of attacks, from container escapes to complex supply chain compromises, targeting these widely used technologies and the companies that rely on them.
A new Linux kernel vulnerability called 'Dirty Frag' allows local attackers to gain higher privileges. This critical flaw could let malicious code escape from containers, posing a serious risk to cloud infrastructure and shared systems.
A critical vulnerability, known as Copy Fail, has been found in the Linux kernel for Azure. The flaw affects cryptographic operations and could allow a local attacker to gain higher privileges or escape from a container, posing a significant security risk for cloud-based applications and infrastructure.