All news

Quantum-resistant signing on AWS, Part 1: Build a software supply chain with ML-DSA

Software supply chain attacks have grown in both frequency and sophistication. Recent high-profile compromises of build systems and open source dependencies demonstrate that attackers increasingly target the trust mechanisms that verify software integrity. Those trust mechanisms rely on digital signature algorithms, and today many use traditional algorithms such as Rivest-Shamir-Adleman (RSA) and the Elliptic Curve […

These ARE the droids you’re looking for

There’s an old leadership fantasy that goes something like this: The CISO surveys a sprawling technology estate, discovers 11 tools doing the work of four, calculates the licensing savings, selects a shiny new strategic platform and declares that consolidation has begun. Six months later, all 11 tools are still running. The new platform is now number 12. I’ve seen variations of this throughout my career, from financi…

[NEU] [hoch] Docker Desktop: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten

Ein lokaler Angreifer kann eine Schwachstelle in Docker Desktop ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen.

CVE-2026-13760 - OS Command Injection in NodejsFunction Docker Bundling in aws-cdk-lib

Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware

CVE-2026-107608: Improper link resolution in asset bundling output handling in aws-cdk-lib

Show HN: K10s – A Clickable Kubernetes TUI (Go, Bubble Tea)

Show HN: AI SRE Arena, an Open Benchmark for AI SRE Agents on Kubernetes

[NEU] [mittel] docker: Schwachstelle ermöglicht Manipulation von Daten und Umgehen von Sicherheitsvorkehrungen

Grid Protection Alliance openPDC and openHistorian

AWS takes aim at runaway AI agent behavior with Strands Box

The AI app builder your team trusts has a root-level backdoor

Dell patches 18 critical flaws that could hand attackers the keys to storage and Kubernetes

GitLab Transcend: Speed you can trust, all the way to production

Every artifact your teams ship, assembled right the first time

Dependency Firewall: Block risky packages before the build

NCSC-2026-0400 [1.00] [M/H] Dell heeft kwetsbaarheden verholpen in Container storage modules

Keyorix: Open-source secrets management for teams that can’t use SaaS

Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes

CVE-2026-103505 - Mount Option Injection in Amazon EFS CSI Driver

Updates on our pledge to make Cloudflare features accessible to everyone

Securing the Kubernetes Supply Chain: Introducing WizOS Helm Charts

EU Cyber Resilience Act requirements for containers and Kubernetes

Zilliz / Attu | 2.6.5

[NEU] [mittel] Kubernetes (kubectl): Schwachstelle ermöglicht Manipulation von Dateien

OperTraitors: How Kubernetes Operators Betray Your Security Posture

[UPDATE] [mittel] docker: Schwachstelle ermöglicht Manipulation von Dateien

Carbonato Botnet Puts an AI Agent on Hacked Docker Hosts

Attack Surface Management in 2026: Why Point-in-Time Scans Can’t Keep Up With Cloud Sprawl

Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent