Runtime Bill of Materials Hardens Container Images
An RBOM combined with SBOM lets teams remove unused components from container images based on observed execution.
Stories per day · 30 days
2 RSS
4 stories, newest first · one card per story
Stories tagged #container
[0day-rubbish] StreamSets Transformer 3.17.0 auth-mode none fallback and un-sandboxed ScalaDTransform execution to container root (8.1 primary)
Researchers disclose StreamSets Transformer 3.17.0 auth fail-open and unsandboxed code execution as container root.
Researchers Found a Botnet That Uses an AI Agent to Operate Inside Compromised Servers
CARBONATO infects exposed Docker hosts, persists, spreads to nearby daemons, and runs a Telegram-controlled AI agent.
USN-8741-1: Flatpak vulnerabilities
Ubuntu patched two Flatpak flaws, including a sandbox escape via app-controlled symlinks allowing host code execution (CVE-2026-34078).