product · 4 records
Docker
Docker Sandboxes Flaw Allows Guest Code to Access macOS Host Files
Docker has fixed a critical sandbox escape vulnerability in Docker Sandboxes for macOS that allowed malicious guest code to access host files.
1 outlet Cyber read
Shai-Hulud's Reach Just Grew to 469 Credential Locations
The Shai-Hulud infostealer worm has expanded its credential scanning capabilities across 469 locations in developer and CI/CD environments.
1 outlet
Researchers identify campaign using GitHub repositories to target cPanel servers
Researchers report a large-scale campaign weaponizing compromised GitHub Actions repositories to target vulnerable cPanel and WebHost Manager servers for credential theft.
2 outlets Cyber read
New NadMesh botnet targets exposed cloud credentials and API keys
A new Go botnet named NadMesh is targeting exposed AI and development services to harvest cloud credentials, Kubernetes tokens, and API keys, with operators claiming thousands of compromised AWS keys.
1 outlet Cyber read