A new exposed Docker API attack uses Tor to hide hackers, install malware, and block admin access, sparking major security ...

Attackers exploit exposed Docker APIs to deploy cryptojackers and scan for more targets The malware installs persistence ...

The attack chain essentially involves breaking into misconfigured Docker APIs to execute a new container based on the Alpine ...

Threat actors are exploiting exposed Docker APIs to deploy malware and cryptocurrency miners and potentially create a new botnet.

The new variant of Docker-targeting malware skips cryptomining in favor of persistence, backdoors, and even blocking rivals ...

A threat actor targeting exposed Docker APIs has updated its malicious tooling with more dangerous functionality that could ...

Attackers are actively scanning for exposed Docker APIs on port 2375 and use them to deploy a malicious payload which drops a Dofloo Trojan variant, a malware known as a popular tool for building ...

Abuse of the Docker API allows remote code execution on targeted system, which enables hackers to escalate and persists thanks to novel attacks called Host Rebinding Attack and Shadow Containers. LAS ...

Analysts from security firm Trend Micro said in a report today that they've spotted a malware botnet that collects and steals Docker and AWS credentials. Cyber attacks and malware are one of the ...

Security researchers have identified a new cyber-threat targeting publicly exposed instances of the Docker Engine API. In this campaign, attackers exploit misconfigurations to deploy a malicious ...