Product

Docker

0 mentions in 7 days · 2 in 30 days · 2 total · first seen Aug 31, 2026 · last 12d ago

Timeline2 articles

Shai-Hulud's Reach Just Grew to 469 Credential Locations. Here's What That Means

GitGuardian found the Shai-Hulud infostealer worm now scans 469 credential locations, including CI/CD and AI tool configs, expanding supply-chain risk.

GitGuardian researchers found that a recent Shai-Hulud worm variant scans for credentials across 469 locations in developer environments, CI/CD tooling, cloud configurations, and AI tool configs, up from 189 paths in earlier variants. The worm reuses stolen credentials to pivot from developer workstations to source code, cloud infrastructure, and package publishing channels, turning credential theft into forward-propagating supply chain attacks. The analysis urges defenders to prioritize removing long-lived package publishing tokens in favor of short-lived OIDC-based trusted publishing, citing recent Docker and GitHub Actions improvements.

The Hacker NewsSep 3, 10:36 UTC · 12d agoMalware in the wild1

Rootless Docker and Its Hidden Security Trade-Offs

A blog post examines the security trade-offs of running Docker in rootless mode, covering isolation benefits and hidden limitations for defenders.

Ken Muse published a write-up titled 'Rootless Docker and Its Hidden Security Trade-Offs', analyzing the security implications of rootless Docker deployments. The feed provides only the title, so detailed findings are not available in this item, but the piece targets the intersection of containerization and privilege isolation practices.

Lobsters · securityAug 31, 03:12 UTC · 15d agoResearch1

Appears with

vendor Docker 2 organization GitGuardian 1 product GitHub Actions 1 malware Shai-Hulud 1 vendor GitGuardian 1 vendor GitHub 1 product npm 1

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.