milioane-de-depozite-docker-au-fost-gasit-promovand-malware (@milioane-de-depozite-docker-au-fost-gasit-promovand-malware@rootlinux.ro)
Trei campanii pe scară largă au vizat utilizatorii Deocker Hub, plantând milioane de depozite careu au împins malware și site-uri de phising de la începutul anului 2021.
După cum cu constatat cercetătorii de securitate JFrog, aproximativ 20% din cele 15 milioane de depozite găzduite de Docker Hub conțineau conținut malițios, de la spam la site-uri […]
https://rootlinux.ro/milioane-de-depozite-docker-au-fost-gasit-promovand-malware/
Show Original Post
tmvt (@tmvt@hachyderm.io)
A quick overview of Docker Docs AI!
#developers, To help you quickly find answers to your #Docker questions, we just launched Docker Docs AI - check it out!
http://occasional-it.com/2024/05/01/a-quick-overview-of-docker-docs-ai/
Show Original Post
mmguero (@mmguero@infosec.exchange)
Malcolm v24.04.0 release notes
The v24.04.0 release of Malcolm contains new features, improvements, bug fixes and component version updates.
See this playlist of overview videos for an introduction to Malcolm and its main components.
- Features and enhancements
- Zeek-extracted files scanned and preserved on a Hedgehog Linux sensor can now be accessed via the extracted files download user interface (#331).
- Improvements to creation of index templates, dashboards, and other saved objects on startup (#208) to ensure that saved objects get created correctly upon upgrade (see this comment for more details on this feature).
- Populating the NetBox inventory via passively-gathered network traffic metadata now uses network traffic logs for DNS, NTLM, and DHCP to identify assets' host names when possible for use when populating device and VM names (#415). Autopopulated devices now have their status field set to
Activerather thanStaged, and uses tags instead to indicated that they were created through autopopulation. - Users can now specify pruning thresholds for carved files so that old files are deleted in order to avoid filling available storage (#453). See a new section of documentation on Managing disk usage for more information about this and similar settings.
- Users can now specify a prefix that will be prepended to dashboards as they are imported into OpenSearch Dashboards or Kibana, allowing users who have dashboards from other sources to differentiate between those and Malcolm's (#455).
- The default anomaly detectors created for the OpenSearch Anomaly Detection plugin are now created with category fields for high cardinality to allow for better breakdown of contributing values to anomalies discovered (#464).
- Include JA4+ plugin in Arkime. See #419 for status on upcoming full JA4+ support in Malcolm.
- Hedgehog Linux sensors can now periodically refresh their Zeek inteligence files.
- Assorted documentation improvements.
- Component version updates
- Arkime to v5.1.2
- Beats to v8.13.2
- elasticsearch-dsl to v8.13.0
- elasticsearch-py to v8.13.0
- Fluent Bit to v3.0.3
- gunicorn to v22.0.0 to address CVE-2024-1135.
- idna to v3.7 to address CVE-2024-3651
- Logstash to v8.13.2
- OpenSearch and OpenSearch Dashboards to v2.13.0
- Bug fixes
- The documentation for Windows host system configuration was out of date and has been updated for the latest version of Microsoft Windows Subsystem for Linux (#421).
- An issue was fixed in which Malcolm's list of users and their password hashes could become corrupted if the file did not initially end with a newline character (#426).
- The manner in which Zeek intel files are generated has been changed to avoid problems found in Kubernetes deployments when scaling out the number of
zeek-livecontainers (#456). See this comment for more details. - Removed the version top-level element from
docker-compose.ymlfiles as it is now obsolete and caused a warning message that sometimes was not handled correctly. - Fix Malcolm ISO not correctly detecting if it's in a live boot ISO environment or installed mode.
- Restart live Zeek instances with
zeekctl deployinstead ofzeekctl restart.
Official ISO installer images for Malcolm and Hedgehog Linux can now be downloaded from Malcolm's releases page on GitHub. Due to limits on individual files in GitHub releases, these ISO files have been split into 2GB chunks and can be reassembled with scripts provided for both Bash (release_cleaver.sh) and PowerShell (release_cleaver.ps1). See Downloading Malcolm - Installer ISOs for instructions.
#Malcolm #HedgehogLinux #Zeek #Arkime #NetBox #OpenSearch #Elasticsearch #Suricata #PCAP #NetworkTrafficAnalysis #networksecuritymonitoring #OT #ICS #icssecurity #CyberSecurity #Cyber #Infosec #GitHub #INL #DHS #CISA #CISAgov #Kubernetes #Docker #raspberrypi
Show Original Post
techbot (@techbot@social.raytec.co)
Malicious Repositories Planted on Docker Hub
Pulse ID: 66323200bdf54d16883d71a7
Pulse Link: https://otx.alienvault.com/pulse/66323200bdf54d16883d71a7
Pulse Author: cryptocti
Created: 2024-05-01 12:13:52
Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#CyberSecurity #Docker #InfoSec #OTX #OpenThreatExchange #bot #cryptocti
Show Original Post
clonbg (@clonbg@masto.es)
Como ver contenido acestream en Linux https://myblog.clonbg.es/como-ver-contenido-acestream-en-linux/ #Docker #Media https://clonbg.es
Show Original Post
pterlisten (@pterlisten@social.cologne)
Does anyone successfully restored a CheckMK site backup in a #Docker container?? I‘m trying to migrate a #CheckMK installation to a new server which is running CheckMK in a Docker container.
Show Original Post
clonbg (@clonbg@masto.es)
Actualización automática de contenedores con Ouroboros https://myblog.clonbg.es/actualizacion-automatica-de-contenedores-con-ouroboros/ #Docker #Seguridad https://clonbg.es
Show Original Post
objects (@objects@social.mrdonaldson.net)
This is using a #SelfHosted instance of changedetection.io, but you'll need to use the forked version (https://github.com/CSDTs/changedetection.io) because you need more than the default 10 steps available in the main version.
Necessity is the mother of invention and all that...
#OpenSource #FOSS #Docker
Show Original Post
digitalhuman (@digitalhuman@mastodon.social)
De onzichtbare dreiging op docker hub ontmaskerd https://www.trendingtech.news/trending-news/2024/04/9242/de-onzichtbare-dreiging-op-docker-hub-ontmaskerd #Docker Hub #cybersecurity #JFrog onderzoek #kwaadaardige repositories #Informa Tech #Trending #News #Nieuws
Show Original Post
jobsfordevelopers (@jobsfordevelopers@mastodon.world)
Twilio is hiring Staff Software Engineer (L4) - Channels
🔧 #java #aws #docker #kafka #kubernetes #mysql
🌎 Remote; Colombia
⏰ Full-time
🏢 Twilio
Job details https://jobsfordevelopers.com/jobs/staff-software-engineer-l-4-channels-at-twilio-mar-1-2024-a6d614?utm_source=mastodon.world&utm_medium=social&utm_campaign=posting
#jobalert #jobsearch #hiring
Show Original Post
tpokorra (@tpokorra@hostsharing.coop)
Ich bin nun für meinen #LightBuildServer von #LXD auf #Incus gewechselt.
Nächster Schritt wäre wohl von #Docker auf #Podman.
Quellen: https://github.com/SolidCharity/LightBuildServer
Hier ist er im Einsatz:
https://lbs.solidcharity.com/projects/
Show Original Post