Hacker News Reader

Here is PDF report in original: https://prevasio.com/static/web/viewer.html?file=/static/Red...

The details about the actively malicious ones in there seem a lot more interesting actually. The "X% have some outdated code somewhere, we didn't test if its actually used" reports on the other hand seem to be required yearly publishing for any security company doing anything with containers...

That's why i share it.

Because people with low-level technical knowledge thinks that once everything is on Docker they're immune to lot of vulnerabilities.

So they run images without hesitation.

Link to the actual PDF: https://prevasio.com/static/Red_Kangaroo.pdf

Is there a full list of the vulnerable images?

Presumably images from reputable vendors like alpine:latest and openjdk:jre-alpine are OK?

Here is list: https://malware.prevasio.com

Yes, it can be seen and searched on https://malware.prevasio.com/

Looks like the vast majority are images that are intended to mine coins, but there are a few "normal-looking" ones in the top as well

Reply on news.ycombinator.com