Secrets in Docker Images: How Credentials Survive Layers
Credentials can survive in image layers, metadata, and build logs. Learn how to find them, remove them safely, and build without baking them in.
Container Security
3 articles
IPV6_FRAG_ESCAPE: The Linux Container Escape Your CVE Scanner May Miss
IPV6_FRAG_ESCAPE is a Linux kernel 6.12 privilege escalation with public PoC code, no CVE at disclosure time, and a practical path from container user to host root.
CrackArmor: Nine AppArmor Flaws That Let Attackers Own the Kernel
Qualys TRU disclosed nine confused deputy vulnerabilities in Linux AppArmor — exposing 12.6 million servers to root escalation, KASLR bypass, and container isolation collapse. Technical deep dive and detection guide.