Blog
Posts about
Container Threats
A critical, high severity vulnerability (CVSS v3.0 10/10 rating) in the Apache Log4j open source Java logging library was disclosed Thursday, December 9 on the foundation’s github page. Enterprises are advised to immediately access the likelihood of being affected by this vulnerability and operate under an ‘assumed breach’ mentality to assess logs and review unusual network activity especially egress connections.
NeuVector provides enterprise-grade security solutions for new cloud infrastructures including platforms like container, Kubernetes, serverless, and more,. New platforms generate new security risks. Let’s look at the unique challenges of data protection in Kubernetes production environments, including SOC2 compliance.
By Fei Huang Docker Hub recently removed 17 backdoored Docker images. This action came after Fortinet reported some cryptomining activity which linked back to these images. Here are some of the interesting facts: Backdoors were hidden inside the MySQL and Tomcat images, which are some of the most popular application containers on Docker Hub. These backdoored images were uploaded as …
A serious backdoor vulnerability in a popular software package was recently reported. It was found in the ssh-decorator Python package. In this open source library, a log function was sending clear text IP addresses, login names and passwords to an external site: “ssh-decorate.cf/index.php.” This immediately became one of the hottest topics about which thousands of discussions occurred in Reddit, Twitter …
By Fei Huang This week, over 1.35 Terabits per second of traffic hit GitHub services all of a sudden. It was the most powerful distributed denial of service attack recorded to date. After only 10 minutes, GitHub had to call for help. Luckily Akamai Prolexic was able to take care of them and blocked the malicious traffic. So what happened …
