Security researchers have identified a new cyber-threat targeting publicly exposed instances of the Docker Engine API. In this campaign, attackers exploit misconfigurations to deploy a malicious ...

New DDoS botnet ShadowV2 targets misconfigured Docker containers and offers a service model where customers launch their own attack.

Scrubbing tokens from source code is not enough, as shown by the publishing of a Python Software Foundation access token with administrator privileges to a container image on Docker Hub. A personal ...

ShadowV2 botnet exploits AWS Docker flaws using Python C2 and Go RAT, enabling sophisticated DDoS-for-hire attacks.

From April, Docker Hub will only allow unauthenticated users ten pulls per hour. Personal accounts and dependent services will also be restricted. The online service Docker Hub is introducing hourly ...