Malicious Content Found Hidden In Over A Thousand Docker Container Images

The Headlines

Over a thousand Docker container images were found hiding malicious content.

Almost 2,000 images of unconfirmed photographs that “Sysdig” analyzed were determined to contain obscene content. AWS login information, SSH keys, the GIT hub, and NPM tokens were also included in the images. According to the #software study, this covert malware can gain access to one’s containers and act as a backdoor.

The most common method used by hackers to attack images was “typosquatting.” This year has seen a 15% increase in this type of spam, with the majority of infected images coming from public libraries. These images, along with two typosquatted images, were downloaded at least 17,000 times.

Tutorials & Guides

Cloud Native Developer Bootcamp

Cloud skills are the most in demand among employers, according to our 2021 Jobs Report. This program will provide you with the knowledge and skills to develop cloud-native applications that can run on any system in as little as 6 months. Start your new career today.

Cloud Engineer Bootcamp

This program will prepare an absolute beginner to learn the most in-demand cloud computing skills in as little as six months. Start your new career today.

Advanced Cloud Engineer Bootcamp

Take your career to the next level. Go from IT administrator to certified cloud pro in as little as six months.

Top Reading Recommendations

5 Types of Git Work-Flow & Explanation of each Flow

Introduction about Git WorkFlow & Types of git workflows - Basic, Feature Branches, Git Flow, Feature Branches and Merge requests, Forking workflow & their explanations.

Top 20 CI/CD Pipeline Interview Questions & Answers

Here you have the top 20 common ci/cd interview questions along with answers. Let’s have a look at it. Razorops is the one of best simplest container native cicd tools.

Virtual Events

• Policy-as-code with Kubewarden | Wed, Nov 30, 9:00 AM (PST)


• Taking full advantage of gRPC | Dec 1 - 2, 12:00 AM (PST)


• Better Observability for Chaos Engineering | Dec 1 - 2, 12:00 AM (PST)


• Hacking Cloud Native applications through Open Source | Tue, Dec 6, 10:00 AM (PST)

DevOps Jobs

• Claranet is looking for DevOps Engineer (AWS, Terraform) - Apply


• DevOps Engineer at LeadSquared - Apply


• IT Support Engineer at Amazon Web Services (AWS) - Apply

Sponsored

PS- We are going to release newsletters every week, so don't forget to subscribe and share them with your network. We hope this newsletter has provided valuable information.