Vulnerabilities
AWS Issues Advisory for OS Command Injection in CDK NodejsFunction Bundling
A high-severity vulnerability in the AWS CDK library allows attackers to execute arbitrary commands during Docker bundling of Node.js functions.
Docker
Everything Threat Times has reported about Docker: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Critical Flaw in openPDC Docker Images Exposes Hardcoded Admin Credentials
Grid Protection Alliance’s openPDC Docker images contain fixed administrative credentials, allowing remote attackers to seize full control of the application.