Container Security: Exploits, Vulnerabilities and Defense
summary
Docker Hub images embed cryptominers that are downloaded >5 million times and mined roughly $90,000 worth of Monero; unsecured Kubernetes consoles expose AWS credentials and S3 buckets (Tesla incident) and search engines like Shodan reveal 2000+ exposed etcd servers. Defaults allow unauthenticated API access unless flags are set; tools to run now include kube-bench, Clair and Google’s registry scanners, plus continuous vulnerability scanning, network monitoring and removing unnecessary container capabilities.
AI-written summary · about
chapters (15)
- 0:00Introduction to container security
- 3:30Kubernetes as the focus
- 6:24Misconfiguration risks
- 7:08Tesla Kubernetes breach
- 9:15Unauthenticated API flaws
- 11:23Shodan and exposed etcd servers
- 13:54Tools for hardening containers
- 16:02Audience vulnerabilities stories
- 18:40Q&A on default security
- 23:16Convincing management
- 24:24Default credentials problem
- 25:50Passwordless security debate
- 27:17Kubernetes complexity
- 28:18Kubernetes praise
- 30:12Security risks for users
related talks
11mLets secure our Kubernetes cluster
49mVulnerability Exploitation In Docker Container Environments
28mWhere Are All of the Container Breaches?
35mInsights into Unsecured Kubernetes in the Wild
25mAll Your Containers Are Belong to Us
38mKubernetes Security: Attacking and Defending K8s Clusters
47mSecuring Containers By Breaking In
31mPrepare to Be Boarded! A Tale of Kubernetes, Plunder, and Cryptobooty