Collaborate Disseminate
Am I Isolated is an open-source container security benchmark that probes users’ runtime environments and tests for container isolation. The Rust-based container runtime scanner runs as a container, detecting gaps in users’ container runtime isola… Continue reading Am I Isolated: Open-source container security benchmark
In this Help Net Security interview, Emily Long, CEO at Edera, discusses the most common vulnerabilities in Kubernetes clusters and effective mitigation strategies. Long shares insights on emerging isolation technologies that could enhance Kubernetes s… Continue reading How isolation technologies are shaping the future of Kubernetes security
In this Help Net Security interview, Paolo Mainardi, CTO at SparkFabrik, discusses comprehensive strategies to secure Kubernetes environments from development through deployment. He focuses on best practices, automation, and continuous monitoring. Many… Continue reading Strengthening Kubernetes security posture with these essential steps
DockerSpy scans Docker Hub for images and retrieves sensitive information, including authentication secrets, private keys, and other confidential data. “DockerSpy was created to address the growing concern of sensitive data leaks within Docker im… Continue reading DockerSpy: Search for images on Docker Hub, extract sensitive information
A critical-severity Docker Engine vulnerability (CVE-2024-41110) may be exploited by attackers to bypass authorization plugins (AuthZ) via specially crafted API request, allowing them to perform unauthorized actions, including privilege escalation. Abo… Continue reading Docker fixes critical auth bypass flaw, again (CVE-2024-41110)
Portainer Community Edition is an open-source, lightweight service delivery platform for containerized applications. It enables the management of Docker, Swarm, Kubernetes, and ACI environments. It provides a smart GUI and a comprehensive API to manage… Continue reading Portainer: Open-source Docker and Kubernetes management
A number of open source tech tools have moved towards commercial licences. Thoughtworks says this creates “big headaches” for IT, who are scrambling to maintain compliance and find replacement tools. Continue reading Some Open Source Software Licences are Only ‘Open-ish,’ Says Thoughtworks
Canonical and Microsoft today announced the general availability of chiseled Ubuntu containers for .NET 6, 7, and 8.
The post Canonical Releases Chiseled Ubuntu Containers for .NET appeared first on Thurrott.com.
Continue reading Canonical Releases Chiseled Ubuntu Containers for .NET
In Jack Wallen’s How to Make Tech Work tutorial, he shows how using the Docker exec command provides you with more flexibility. Continue reading How to Easily Run Commands Inside a Running Docker Container
Curl v8.4.0 is out, and fixes – among other things – a high-severity SOCKS5 heap buffer overflow vulnerability (CVE-2023-38545). Appropriate patches for some older curl versions have been released, too. Preparation for the security updates … Continue reading Curl project squashes high-severity bug in omnipresent libcurl library (CVE-2023-38545)