Bugtraq mailing list archives

[Newsletter/Marketing] [ISN] Docker Hacked: 190,000 Accounts Breached


From: InfoSec News <alerts () infosecnews org>
Date: Tue, 30 Apr 2019 07:27:47 +0000 (UTC)

https://www.cbronline.com/news/docker-hacked

By Ed Targett
Editor
Computer Business Review
April 29, 2019

Docker, the company behind an open platform for building and running distributed
applications, said on Friday that hackers had breached one of its databases,
potentially giving them access to sensitive source code on the external
repositories of up to 190,000 different customers.

Data stolen from the San Francisco-based container specialist included usernames
and hashed passwords for around five percent of Docker’s customers, as well as
GitHub and Bitbucket tokens for Docker autobuilds. (i.e. passwords that bridge
Docker and external codebase repositories).

Docker is used by many of the world’s largest financial and technology
companies, including Paypal and Visa, as well as blue chips like pharmaceutical
giant GlaxoSmithKline. It is unclear which accounts were affected: Microsoft was
among those making clear that its official files hosted in Docker Hub were not
compromised.

[...]

--
Subscribe to InfoSec News
https://www.infosecnews.org/subscribe-to-infosec-news/
https://twitter.com/infosecnews_

Current thread: