Everything Vuln Post has reported about Container Security: 4 stories, newest first. Part of our Vulnerabilities coverage.
A high-severity injection vulnerability in BentoML allows attackers to manipulate Docker build instructions through crafted configuration files, potentially exposing build secrets.
Standard isolation mechanisms often fail because they rely on shared kernel resources that an attacker can manipulate through misconfigured mount points or privilege escalation.
Docker fixed a critical flaw in its registry that let attackers impersonate users via transferred personal access tokens during account conversions.
Most container breaches occur not by breaking the kernel, but by exploiting misconfigured host mounts and privileged runtime flags that grant unintended access.