Collaborate Disseminate
By Deeba Ahmed
LemonDuck cryptomining botnet previously targeted Microsoft Exchange servers. Now it is targeting the world’s leading containerization platform, Docker.…
This is a post from HackRead.com Read the original post: LemonDuck Cryp… Continue reading LemonDuck Cryptomining Botnet Hunting for Misconfigured Docker APIs
Farming is a challenge under even the best of circumstances. Almost all conventional farmers use some combination of tillers, combines, seeders and plows to help get the difficult job done, …read more Continue reading Open-Source Farming Robot Now Includes Simulations
When the PlayStation 3 first launched, one of its most lauded features was its ability to officially run full Linux distributions. This was of course famously and permanently borked by …read more Continue reading Turning the PS4 into a Useful Linux Machine
For a new project I am looking for open source tools to make the CI/CD chain more secure. So I am looking for open source tools in order to perform:
static code analysis
dynamic testing (for the API)
secrets discovery
vulnerabilities scan… Continue reading Open source tools for security controls in CI/CD pipeline [closed]
What are the security implications of mapping a host folder to a Docker container ro? For example -v /usr/local/bin:/usr/local/bin:ro.
Of course, the container can now read the host folder. But, assuming the mapping is of data that’s publ… Continue reading Security of a ro volume in Docker
I learned about gVisor from https://security.stackexchange.com/a/259275/133925 . It runs containers under a custom kernel, written in Go, with very intense security.
My question is: The whole point of Docker is to use the host kernel. Ho… Continue reading How does gVisor run its own kernel replacement under Docker for security?
If I want to run untrusted code inside a Docker container, or an untrusted Docker container for that matter, how can I restrict it?
I’d like to make sure it has no access to the host filesystem. Ideally I’d like it to have limited network… Continue reading Security of untrusted Docker containers
I want to use Lokinet over a primary vpn. So I created a docker for primary VPN called openvpn (it uses an openVPN connection) and tried:
# docker run –net=container:openvpn –name lokinet –cap-add=NET_ADMIN –device=/dev/net/tun massiv… Continue reading Chaining VPNs by docker [migrated]
I’m scanning my docker image using Tirvy for vulnerabilities. This is my Dockerfile
FROM python:3.10-slim
ARG PORT=5000
WORKDIR /app
COPY . /app
RUN apt-get update && apt-get upgrade -y
RUN pip3 install -r requirements.txt
HUB Security announced its Docker Digital Twin product to protect, authenticate, and verify traffic created by Docker, a highly used platform for package containment. The HUB Security Docker Digital Twin enforces access control and provides governance … Continue reading HUB Security Docker Digital Twin authenticates and verifies incoming Docker traffic