A new exposed Docker API attack uses Tor to hide hackers, install malware, and block admin access, sparking major security ...

The attack chain essentially involves breaking into misconfigured Docker APIs to execute a new container based on the Alpine ...

Threat actors are exploiting exposed Docker APIs to deploy malware and cryptocurrency miners and potentially create a new botnet.

The new variant of Docker-targeting malware skips cryptomining in favor of persistence, backdoors, and even blocking rivals ...

Analysts from security firm Trend Micro said in a report today that they've spotted a malware botnet that collects and steals Docker and AWS credentials. Cyber attacks and malware are one of the ...

A threat actor targeting exposed Docker APIs has updated its malicious tooling with more dangerous functionality that could ...

The never-before-seen Xanthe cryptomining botnet has been targeting misconfigured Docker APIs. Researchers have discovered a Monero cryptomining botnet they call Xanthe, which has been exploiting ...

The malware is a new payload that uses Dogecoin wallets for its C2, and spreads via the Ngrok botnet. A fresh Linux backdoor called Doki is infesting Docker servers in the cloud, researchers warn, ...

Security researchers have identified a new cyber-threat targeting publicly exposed instances of the Docker Engine API. In this campaign, attackers exploit misconfigurations to deploy a malicious ...

Learn how to migrate Rootful Docker setup to Rootless Docker in Debian and Ubuntu Linux step-by-step. Make your containers ...