Operation "Red Kangaroo": Industry's First Dynamic Analysis of 4M Public Docker Container Images - Spoilers - 51 percent of all containers had "critical" vulnerabilities, while 13 percent were classified as "high" and four percent as "moderate" vulnerabilities. Security News & Discussion

---

• Operation "Red Kangaroo": Industry's First Dynamic Analysis of 4M Public Docker Container Images - Spoilers - 51 percent of all containers had "critical" vulnerabilities, while 13 percent were classified as "high" and four percent as "moderate" vulnerabilities.
• OWASP TimeGap Theory Handbook for learning to exploit TOCTOU race conditions in web apps
• Bcrypt implementation flaw in BouncyCastle
• Release of the open source AIL Framework (Analysis Information Leak framework ) version 3.4 released with a new language detection module and many improvements · ail-project/ail-framework

Operation "Red Kangaroo": Industry's First Dynamic Analysis of 4M Public Docker Container Images - Spoilers - 51 percent of all containers had "critical" vulnerabilities, while 13 percent were classified as "high" and four percent as "moderate" vulnerabilities. Posted: 20 Dec 2020 12:20 PM PST submitted by /u/digicat [link] [comments]

OWASP TimeGap Theory Handbook for learning to exploit TOCTOU race conditions in web apps Posted: 19 Dec 2020 11:46 PM PST submitted by /u/AbhiMBalakrishnan [link] [comments]

Bcrypt implementation flaw in BouncyCastle Posted: 19 Dec 2020 03:43 PM PST submitted by /u/ScottContini [link] [comments]

Release of the open source AIL Framework (Analysis Information Leak framework ) version 3.4 released with a new language detection module and many improvements · ail-project/ail-framework Posted: 20 Dec 2020 07:05 AM PST submitted by /u/adulau [link] [comments]

You are subscribed to email updates from /r/netsec - Information Security News & Discussion. To stop receiving these emails, you may unsubscribe now.	Email delivery powered by Google
Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States