bugtraq - [Newsletter/Marketing] [ISN] Docker Hacked: 190,000 Accounts Breached

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <alpine.DEB.2.21.1904300727350.10941@ip-172-30-0-239.ec2.internal>
Date: Tue, 30 Apr 2019 07:27:47 +0000 (UTC)
From: InfoSec News <alerts@...osecnews.org>
To: isn@...ts.infosecnews.org
Subject: [Newsletter/Marketing] [ISN] Docker Hacked: 190,000 Accounts
 Breached

https://www.cbronline.com/news/docker-hacked

By Ed Targett
Editor
Computer Business Review
April 29, 2019

Docker, the company behind an open platform for building and running distributed
applications, said on Friday that hackers had breached one of its databases,
potentially giving them access to sensitive source code on the external
repositories of up to 190,000 different customers.

Data stolen from the San Francisco-based container specialist included usernames
and hashed passwords for around five percent of Docker’s customers, as well as
GitHub and Bitbucket tokens for Docker autobuilds. (i.e. passwords that bridge
Docker and external codebase repositories).

Docker is used by many of the world’s largest financial and technology
companies, including Paypal and Visa, as well as blue chips like pharmaceutical
giant GlaxoSmithKline. It is unclear which accounts were affected: Microsoft was
among those making clear that its official files hosted in Docker Hub were not
compromised.

[...]

--
Subscribe to InfoSec News
https://www.infosecnews.org/subscribe-to-infosec-news/
https://twitter.com/infosecnews_