10K Docker images spray live cloud creds across the internet
ID: 67e98510-1b06-50f4-bd6a-9b849eea6306
STIX ID: report--67e98510-1b06-50f4-bd6a-9b849eea6306
Feed Name: The Register (Security)
Threat Score
Flare's November 2025 analysis found 10,456 public Docker Hub images exposing sensitive, often active secrets—including nearly 4,000 AI model tokens and numerous cloud/CI-CD credentials—impacting over 100 companies (including a Fortune 500 firm and a major bank); exposures are driven by build-context leakage and shadow-IT accounts, and deleted secrets frequently remain active, prompting recommendations for secrets management, ephemeral credentials, and automated scanning.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
