Topic

Container Security: news, advisories and analysis

11 articlesUpdated 21 Oct 2026

CyberSecureToday covers Container Security across 11 articles published between 16 Sep 2026 and 21 Oct 2026. The coverage includes 9 vulnerability advisories and 2 analysis or guidance pieces. 9 advisories are rated critical or high severity.

Stories on Container Security most often intersect with Cloud Security, Kubernetes and Google Cloud, with Technology, Cloud & SaaS the most affected sector. The most recent story, “SingCERT Issues Critical Alert as CARBONATO Botnet Exploits Exposed Docker Remote APIs Across Cloud Workloads”, was published 21 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSHigh
SingCERT Issues Critical Alert as CARBONATO Botnet Exploits Exposed Docker Remote APIs Across Cloud Workloads
SingCERT issues an urgent warning as the CARBONATO botnet actively scans Singapore cloud subnets, hijacking exposed unauthenticated Docker Remote APIs for container escapes.
Aisha Noor21 Oct 202613 min read
ThreatsCloud & SaaSHigh
Google Cloud Run & Artifact Registry Privilege Escalation Flaw CVE-2026-79696 Patched
Google Cloud resolves a high-severity privilege escalation flaw in Cloud Run and Artifact Registry auth helpers (CVE-2026-79696) exposing service account tokens.
Priya Raman14 Oct 20268 min read
ThreatsCloud & SaaSCritical
Kubernetes MCP Server Structured Tool Argument Injection Exposes Cluster Service Credentials (CVE-2026-61459)
A critical flaw in Model Context Protocol (MCP) Kubernetes bridge servers allows attackers to inject malicious flags into kubectl tool calls, exposing cluster service tokens.
CST Editorial Desk30 Sep 202611 min read
ResearchCloud & SaaS
MicroVM Isolation Deep Dive: AWS Firecracker vs Google gVisor Kernel Boundaries
An architectural research study comparing AWS Firecracker and Google gVisor, analyzing hypervisor boundaries, KVM virtio mechanics, and container breakout vectors.
Aisha Noor28 Sep 202610 min read
ThreatsCloud & SaaSHigh
Amazon ECS Container Agent Flaw Enables Task Boundary Breakout and IAM Role Credential Hijacking
AWS resolves a container boundary escape flaw in Amazon ECS Container Agent that allowed unprivileged containers to intercept task metadata and assume host IAM roles.
Aisha Noor25 Sep 202617 min read
ThreatsCloud & SaaSHigh
ORAS-Go Symlink Path Traversal Flaw Opens OCI Artifact Supply Chain to Compromise
A high-severity CVSS 8.8 path traversal vulnerability in oras-go allows malicious OCI container artifacts to escape extraction roots and execute arbitrary code.
CST Editorial Desk23 Sep 202616 min read
ThreatsCloud & SaaSHigh
containerd CRI Checkpoint Flaw CVE-2026-50195 Enables Local Node Image Cache Poisoning Across Kubernetes Clusters
High-severity vulnerability CVE-2026-50195 in containerd allows privileged containers to poison the host image cache via CRI Checkpoint API tar archive injection.
Aisha Noor21 Sep 202615 min read
ThreatsCloud & SaaSHigh
Azure Kubernetes Service Container Path Traversal Flaw Enables Node Escape and Code Execution
Microsoft patches high-severity vulnerability CVE-2026-32193 in Azure Kubernetes Service allowing container workloads to escape sandboxes via path traversal.
Priya Raman19 Sep 202611 min read
ThreatsCloud & SaaSCritical
Public Exploits Released for Four Linux Kernel Flaws Enabling Local Root and Container Compromise
Working public exploits released for four Linux kernel flaws—DirtyAH6, TUNderflow, PPPoEject, and DiagSpill—enabling local root escalation and container escapes.
CST Editorial Desk19 Sep 202613 min read
ThreatsCloud & SaaSCritical
Amazon EKS Network Policy Agent Flaw Allows Pod Isolation Bypass Across Kubernetes Clusters
AWS patches high-severity flaw CVE-2026-86831 in Amazon EKS aws-network-policy-agent allowing unauthorized pod communication and network isolation bypass.
Daniel Okafor19 Sep 202611 min read
InsightsCloud & SaaS
Google Cloud GKE Workload Identity Privilege Escalation: Cloud Threat Forensics & Hardening
Technical analysis of Google Cloud Platform (GCP) Kubernetes Workload Identity metadata impersonation vectors, token theft forensics, and enterprise IAM hardening.
Mei-Lin Chen16 Sep 202612 min read