Docker Hub hack exposed data of 190,000 users

guest · Apr 27, 2019

Docker Hub hack exposed data of 190,000 users
Docker Hub usernames, hashed passwords, GitHub and Bitbucket access tokens exposed in the hack
April 27, 2019
https://www.zdnet.com/article/docker-hub-hack-exposed-data-of-190000-users/

Docker Hub, the official repository for Docker container images, has announced a security breach on late Friday night.
"On Thursday, April 25th, 2019, we discovered unauthorized access to a single Hub database storing a subset of non-financial user data," said Kent Lamb, Director of Docker Support.

Docker says the hacker had access to this database only for a short moment, but data for approximately 190,000 users had been exposed. The company said this number is only five percent of Docker Hub's entire userbase.
Docker is now notifying users and prompting a password reset.

Docker said it is still investigating the incident and will share details when available. The security incident was not disclosed on the company's website, but only via email. A copy of the full email is available here or in the image below.
Click to expand...

guest · Apr 29, 2019

Docker Hub Breach: It's Not the Numbers; It's the Reach
April 29, 2019
https://www.databreachtoday.com/docker-hub-breach-its-numbers-its-reach-a-12425

Although the database didn't contain financial data, it did contain tokens from other much-used developer resources, including GitHub and Bitbucket. When developers are building an image [...]
And that's what makes the Docker Hub breach potentially so much more worrying: If tokens have been compromised, it gives attackers many more places to slip in malicious code.

As one commenter on Hacker News put it, Docker Hub has been an attractive target for some time: "With how much of the internet blindly pulls images from it [Docker Hub], the potential gain from hijacking just one high-profile one would be monumental."

The Docker Hub situation illustrates how what appears to be a smallish breach by the numbers could be much worse due to how developers work by using different services.
Or as Dino A. Dai Zovi, a staff security engineer with Square, put it: "2019 being the year of software supply-chain integrity keeps getting truer."
Click to expand...

On the Docker breach: Even if your company doesn't rely on Docker Hub for production, if a developer in your org enabled auto builds and linked to GitHub via oauth for a personal project, when that oauth token is compromised, _all_ repos on GH they had access to are vulnerable.
— Kenn White (@kennwhite) April 27, 2019
Click to expand...

Log in or Sign up

Docker Hub hack exposed data of 190,000 users

guest Guest

guest Guest

Log in or Sign up

Docker Hub hack exposed data of 190,000 users

guest Guest

guest Guest

Useful Searches