https://www.aquasec.com/tag/attack-vector/ Cloud Native Security, Container Security & Serverless Security Mon, 15 Jul 2024 08:18:26 +0000 en-US hourly 1 https://wordpress.org/?v=6.5.5 https://www.aquasec.com/blog/can-you-trust-your-vscode-extensions/ Fri, 06 Jan 2023 11:00:00 +0000 https://www.aquasec.com/?p=14494 Aqua Nautilus researchers have recently discovered that attackers can easily impersonate popular Visual Studio Code extensions and trick unknowing developers into downloading them. In original vulnerability research, we’ve uncovered a new attack method which could act as an entry point for an attack on many organizations. We’ve also discovered that some extensions may have already …]]> https://www.aquasec.com/blog/container-attack-surface-analysis/ Wed, 27 Oct 2021 14:15:10 +0000 https://www.aquasec.com/?p=15110 In 2021, container attacks have been on the rise. We observed numerous attacks that were designed to escape container environments to the underlying host, increasing the impact of the attack. But how much damage can be caused when an attacker manages to escape a container? To answer this question, we conducted an analysis of real-world …]]> https://www.aquasec.com/blog/threat-alert-ddos-attack-docker-daemons/ Mon, 20 Jan 2020 13:04:58 +0000 https://www.aquasec.com/?p=15660 Aqua’s research team continuously investigates and analyzes the anatomy of new attacks in the wild. Recently, we identified attacks that exploited misconfigured open Docker daemons, where attackers were actively using this attack vector to hijack environments in order to launch targeted DDoS attacks. Each of the attacks were carried out using a botnet of containers, …]]> https://www.aquasec.com/blog/dns-spoofing-kubernetes-clusters/ Thu, 29 Aug 2019 11:58:25 +0000 https://www.aquasec.com/?p=15749 In this post I’ll describe how an attacker, who manages to run malicious code on a cluster can, with no special permissive permissions, successfully spoof DNS responses to all the applications running on the cluster, and from there execute a MITM (Man In The Middle) on all network traffic of pods. Before we get into …]]> https://www.aquasec.com/blog/cryptocurrency-miners-abusing-containers-anatomy-of-an-attempted-attack/ Thu, 15 Feb 2018 13:55:22 +0000 https://www.aquasec.com/?p=16064 This isn’t a story about a Docker vulnerability; it’s a story about how hackers are looking for unsecured Docker deployments where they can mine cryptocurrency. You shouldn’t leave your Docker daemon unsecured  any more than you would leave your mail server unsecured. We’ve heard many accounts of attempted (sometimes successful) cryptocurrency mining attacks on container …]]>