Docker

Be prepared to patch high-severity vulnerability in curl and libcurl

October 10, 2023

UPDATE (October 11, 2023, 07:15 a.m. ET): Curl v8.4.0 is out and fixes both CVE-2023-38545, a SOCKS5 heap buffer overflow vulnerability and CVE-2023-38546, a cookie injection …

Researchers find hidden vulnerabilities in hundreds of Docker containers

February 23, 2023

Rezilion uncovered the presence of hundreds of Docker container images containing vulnerabilities that are not detected by most standard vulnerability scanners and SCA tools. …

Python tarfile vulnerability affects 350,000 open-source projects (CVE-2007-4559)

September 22, 2022

Trellix Advanced Research Center published its research into CVE-2007-4559, a vulnerability estimated to be present in over 350,000 open-source projects and prevalent in …

Loft partners with Docker to help users manage virtual Kubernetes clusters

July 31, 2022

Loft Labs partners Docker so that Docker Desktop users can now set up and manage virtual Kubernetes clusters. Recently, Docker announced the launch of an extensions API …

Mirantis collaborates with Docker to accelerate application design and delivery for developers

June 5, 2022

Mirantis announced a partnership with Docker to make it easier for Docker Desktop users to quickly start a K0s Kubernetes cluster on the local desktop and use Lens, the …

HUB Security Docker Digital Twin authenticates and verifies incoming Docker traffic

December 17, 2021

HUB Security announced its Docker Digital Twin product to protect, authenticate, and verify traffic created by Docker, a highly used platform for package containment. The HUB …

CasaOS: Open-source home cloud based on the Docker ecosystem

December 13, 2021

For parents and families, the thought of someone gaining access to sensitive information can be nothing short of a nightmare. However, one group of developers are on a mission …

Confidential Computing Consortium unveils Gramine 1.0 to protect sensitive datasets at all stages

November 3, 2021

The Confidential Computing Consortium’s new Gramine Project is introducing its production-ready version – Gramine 1.0 – to enable protection of sensitive workloads with Intel …

Fugue adds Kubernetes security checks for securing IaC and cloud runtime environments

October 14, 2021

Fugue announced support for Kubernetes security prior to deployment. Using policy as code automation built on the open source Regula policy engine, Fugue provides a unified …

Fugue IaC platform empowers cloud teams to eliminate security gaps

September 30, 2021

Fugue announced Fugue IaC, a unified platform for securing infrastructure as code (IaC) and cloud runtime environments using a single set of policies. Powered by a Unified …

Enterprising criminals are selling direct access to cloud accounts

September 6, 2021

Lacework released its cloud threat report, unveiling the new techniques and avenues cybercriminals are infiltrating to profit from businesses. The rapid shift of applications …

Perforce Helix Artifacts streamlines development workflow complexity and reduces costs