Blog
Posts about
Docker Security
By Fei Huang Recently, security researchers from Intezer shared an interesting case study about malware targeting public Docker environments. Security researchers have named this malware Doki. It is being downloaded and installed as a Linux backdoor. It is using the DynDNS service and a unique Domain Generation Algorithm (DGA) based on the Dogecoin cryptocurrency blockchain to find it’s controller in …
Attackers can login to root with no password on affected systems On May 8, 2019, a potentially serious vulnerability was announced affecting the Docker Alpine Linux container image. The vulnerability allows an attacker to authenticate as the root user with no password if using Linux PAM or other authentication means. Potentially thousands of downloads of affected images have been downloaded …
By Fei Huang A new docker vulnerability affecting container security, CVE-2019-5736 was just announced, with some calling it a ‘Doomsday Docker Security Hole.’ This is just 2 months after the critical Kubernetes vulnerability was reported allowing attackers to take control of the api server. From one of the runc maintainers Aleksa Sarai: Aleksa stated that “this docker vulnerability allows a …
Announcements being made at KubeCon + CloudNativeCon North America 2018 Seattle, WA – December 10, 2018 – NeuVector, the leader in Container Network Security, today announced containerd and CRI-O run-time support. The Kubernetes security company is unveiling these new additions to its platform at KubeCon + CloudNativeCon North America 2018, where NeuVector is participating as an exhibitor and conference sponsor. …
Announced at DockerCon Europe, the Kubernetes security company will demonstrate its integrated solution that prevents vulnerable images from being deployed in production Barcelona, Spain – December 3, 2018 – NeuVector, the leader in container network security delivering the first and only next generation container firewall, today announced the addition of new Admission Control capabilities that seamlessly integrate with Kubernetes. The …
