An arbitrary file write (CVE-2026-33945) affects `Incus` via `systemd-creds` options. This could lead to system compromise. Monitor vendor guidance for patches. #Incus #ContainerSecurity #Infosec pulsepatch.io/posts/cve-2026…
20
Search
Container security basics (often ignored):
• Don’t run as root
• Minimal base images
• Scan with Trivy
• No secrets in Dockerfiles
• Read-only filesystems
• Container network policies
Containers are convenient — not inherently secure.
#Docker #ContainerSecurity 🐳🔐
15
Automate #FedRAMP scanning in CI/CD with Anchore Enterprise. Secure your containers within the 30-day window. Details: anchore.com/fedramp/ #ContainerSecurity #DevSecOps
1
20
A critical default password vulnerability (CVE-2026-4404) affects `Harbor`. Unauthorized web UI access is possible via default credentials. Review and reset all default passwords immediately. #Harbor #ContainerSecurity #CVE pulsepatch.io/posts/cve-2026…
39
Container security, but practical.
From enumeration to breakout and privilege escalation, this course teaches the techniques attackers use, and the controls defenders must put in place.
onlysecurity.com/courses/docker…
#CloudSecurity #ContainerSecurity #DevSecOps
1
🐻 Docker image pull хийгээд шууд production руу push хийдэг хүн байвал — та literally unknown malware-г deploy хийж байна.
Trivy эсвэл Snyk-ээр scan хий. Base image-ийг distroless ашигла. Root-ээр container бүү ажиллуул.
Laziness = attack surface.
#ContainerSecurity #DevSecOps
12
We actually can be in two places at once…
Can you guess which is our RSAC booth and which is our KubeCon booth?
If you’re at either event, come find us:
📍 RSAC: Booth # S-1061
📍 KubeCon: Booth # 940 + 🎯 Space # 340
#KubeConEU #RSAC #ContainerSecurity #Cybersecuri7Vl
32
🐳 Docker image pull хийхдээ сохроор битгий ажиллуул.
`docker scout cves [image]` — CVE шалга
`trivy image [name]` — layer бүрийг задла
Base image: Alpine > Ubuntu (attack surface бага)
Untrusted registry = supply chain attack-ийн урилга.
#ContainerSecurity #DevSecOps
35
GoHarbor's Harbor faces a critical 9.4 CVSS flaw (CVE-2026-4404). Default admin passwords allow total registry compromise and image poisoning. Update now.
#Harbor #CloudSecurity #ContainerSecurity #CVE #InfoSec #Kubernetes #SupplyChain #DevSecOps
securityonline.info/harbor-registr…
319
🐋 Docker image-аа blind trust хийж байна уу?
`docker scan`, Trivy, Snyk — дор хаяж нэгийг CI/CD pipeline-даа оруул. Base image-ийн CVE чинь чиний production vulnerability. "Latest" tag = known risk.
Scan хийхгүй deploy хийх = нүдээ аниад driving хийх.
#ContainerSecurity...
31
@minimusio Open Source Program applications open March 24, 2026, giving eligible projects access to tools that strengthen software supply chain security. #SupplyChainSecurity #DevSecOps #ContainerSecurity #cybersecurity #OpenSource buff.ly/ydIAsF2
1
10
Dive into Minimus, the open-source project simplifying #ContainerSecurity! Designed to reduce the attack surface, it audits only the essentials, ensuring lightweight yet robust protection. Learn more about its potential impact on secure deployments. #OpenSource #DevSecOps
8
If you’re gambling at runtime, you’re already losing.
Attackers don’t exploit what’s in dev.
They exploit what’s running in production
Booth 535.
Roulette table optional.
Runtime gambling not recommended.
#ContainerSecurity #RuntimeSecurity #AquaSecurity #RuntimeExposureManagementent
1
609
🐳 Docker image-аа blind deploy хийж байна уу?
`docker scan`, Trivy, Snyk — гурвыг давхарла. Base image-ийн CVE-ийг runtime-д олохоос өмнө CI/CD pipeline-д зогсоо. Distroless эсвэл Alpine ашигла — attack surface 80% буурна.
#ContainerSecurity #DevSecOps
40
Your @Backstage runtime container has 3 shells, yarn, and a package manager.
None needed. All exploitable.
Switch to @Docker Hardened Images → distroless, non-root, SLSA Level 3, smaller image.
Guide 👉docs.docker.com/guides/dhi-bac…S
#Docker #ContainerSecurity #Backstage
Secure a Backstage application with Docker Hardened Images
Secure a Backstage developer portal using Docker Hardened Images, covering native module compilation, Socket Firewall protection, and distroless runtime images.
From docs.docker.com 1
116
Defend for Containers in Elastic Stack 9.3.0 offers runtime security by capturing container process and file telemetry, enriching events with orchestration context, and enabling policy-driven detection in Kubernetes environments. #ContainerSecurity #Kube… ift.tt/2OkaLnA
Linux & Cloud Detection Engineering – Getting Started with Defend for Containers (D4C)
Defend for Containers (Elastic Stack 9.3.0) is a runtime security integration that captures container process and file telemetry, enriches events with container and orchestration context, and...
From hendryadrian.com 77