logo

10K Docker images spray live cloud creds across the internet

ID: 67e98510-1b06-50f4-bd6a-9b849eea6306

STIX ID: report--67e98510-1b06-50f4-bd6a-9b849eea6306

Feed Name: The Register (Security)

Threat Score
78/100

Date Published: 2025-12-11

Date Updated: 2026-04-26

Author: Carly Page

...
...

Flare's November 2025 analysis found 10,456 public Docker Hub images exposing sensitive, often active secrets—including nearly 4,000 AI model tokens and numerous cloud/CI-CD credentials—impacting over 100 companies (including a Fortune 500 firm and a major bank); exposures are driven by build-context leakage and shadow-IT accounts, and deleted secrets frequently remain active, prompting recommendations for secrets management, ephemeral credentials, and automated scanning.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.