#container-security tag

BellSoft Survey Finds Container Security Practices Are Undermining Developers' Own Goals

Container security breaches are common and exacerbated by human error, bloated base images, and reliance on reactive defenses that expand production attack surfaces.

Information security

fromSecurityWeek

2 weeks ago

RapidFort Raises $42M to Automate Software Supply Chain Security

RapidFort raised $42 million to scale an automated platform that eliminates vulnerabilities by analyzing, hardening containers, supplying curated near-zero-CVE images, and reducing runtime attack surface.

fromInfoQ

3 weeks ago

Chainguard Finds 98% of Container CVEs Lurking Outside the Top 20 Images

Chainguard draws on telemetry from 290,000 images and almost half a billion builds to examine how customers actually consume and maintain open source components. It finds that foundational language and infrastructure images such as Python, Node, nginx, Go and Redis dominate production usage, forming what it describes as the baseline stack for the modern AI-driven software ecosystem.

Information security

fromTechzine Global

3 weeks ago

Developers struggle with container security

Almost a quarter of those surveyed said they had experienced a container-related security incident in the past year. The bottleneck is rarely in detecting vulnerabilities, but mainly in what happens next. Weeks or months can pass between the discovery of a problem and the actual implementation of a solution. During that period, applications continued to run with known risks, making organizations vulnerable, reports The Register.

Information security

Java

fromTheregister

3 weeks ago

Java devs want container security - not the hassle

Many Java developers prefer pre-hardened container providers because securing containers and related tooling is time-consuming, error-prone, and constrained by organizational resources.

DevOps

fromInfoQ

1 month ago

Docker Makes Hardened Images Free in Container Security Shift

Docker released over 1,000 hardened container images under Apache 2.0, providing secure, non-root, minimal base images with SBOMs and SLSA provenance for all developers.

Information security

fromTechzine Global

2 months ago

Docker removes paywall for hardened images

Docker is releasing Docker Hardened Images as free, Apache 2.0–licensed, Debian/Alpine-based pre-secured container images accessible to developers, teams, and organizations without license fees.

Information security

fromInfoQ

2 months ago

BellSoft Unveils Hardened Java Images

BellSoft's Hardened Images significantly reduce container vulnerabilities and resource use by combining Java runtime optimisation, OS hardening, and proactive CVE remediation.

fromTechzine Global

4 months ago

Docker makes secure images accessible to smaller businesses

Docker is launching a new subscription service for its Hardened Images catalog. The secure container images are designed to help organizations achieve near-zero CVEs without the high costs that were previously associated with this. With this launch, Docker is committed to democratizing container security. Every developer often starts their journey at Docker Hub. According to the company, this first step should be secure by default, without a premium price tag.

Information security

#docker

fromCSO Online

5 months ago