[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fX4WFFIABH5_tb8TMJVZXagbx3hiu5Y1aqS7YP58lfR4":3},{"article":4,"iocs":53,"watch_terms":58,"solutions":59,"lesson":143},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"7f458294-5a27-412c-aa0e-a06fce8176ef","Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another","docker-fixes-critical-two-year-old-hub-flaw-that-let-one-user-push-images-as-ano-f459c5","A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it found no evidence that anyone exploited it. The flaw was in the feature that converts a personal account into an organization, Docker said in a security advisory on October 12.","A critical vulnerability in Docker Hub, present for over two years, allowed one user to push, pull, or delete container images as another user. The flaw, tracked as CVE-2026-105445 with a CVSS score of 9.4, was fixed on September 30, 2026. Docker found no evidence of exploitation but noted that malicious actors could have published compromised images under legitimate names.","Docker Hub flaw allowed users to push images as others; fixed in September 2026.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F10\u002Fdocker-fixes-critical-two-year-old-hub.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEile879Rmv8zAdU5PMclUp5RnNGDb3h1u3aVZ-VigGjnO0RFcyCQ03s7_lIqMGDiow5ilPumq3B2_bsvewqRlepch4lFwLvOUEDQZPYd9Vv8untJVZFmrv5Zhgvj54cs4J_vCYW4GVY-XsQl7SXD-yrXbED6KpiWbTq-kL_0aNwef3xjV3cBGQ3dsodqAM\u002Fs1600\u002Fdock.jpg","2026-10-13T18:03:18+00:00","2026-10-13T20:00:20.499827+00:00",8,[17,20,23,26,28],{"name":18,"type":19},"Docker Hub","product",{"name":21,"type":22},"Docker","vendor",{"name":24,"type":25},"container images","technology",{"name":27,"type":19},"Trivy",{"name":29,"type":19},"KICS","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":30,"icon":32,"name":33,"slug":34},null,"Vulnerabilities","vulnerabilities",[36,41,43,48],{"category":37},{"id":38,"icon":32,"name":39,"slug":40},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":42},{"id":30,"icon":32,"name":33,"slug":34},{"category":44},{"id":45,"icon":32,"name":46,"slug":47},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":49},{"id":50,"icon":32,"name":51,"slug":52},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[54],{"type":55,"value":56,"context":57},"cve","CVE-2026-105445","Docker Hub account takeover vulnerability",[21,18,27],{"controls":60,"vendors":142},[61,90,113],{"slug":62,"name":63,"problem":64,"products":65},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[66,74,82],{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"yubico","Yubico","\u002Fvendor-logos\u002Fyubico.png","yubikey","YubiKey","https:\u002F\u002Fwww.yubico.com\u002Fproducts\u002F","Hardware security keys for FIDO2, passkeys and smart card login, in USB and NFC versions.",{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"slug":91,"name":92,"problem":93,"products":94},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[95,100,108],{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":96,"product_name":97,"url":98,"description":99},"defender-for-identity","Microsoft Defender for Identity","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-for-identity","Detects attacks against on-premises Active Directory and hybrid identities.",{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"acalvio","Acalvio","\u002Fvendor-logos\u002Facalvio.png","shadowplex-identity-protection","ShadowPlex Identity Protection","https:\u002F\u002Fwww.acalvio.com\u002Fproducts\u002Fidentity-protection\u002F","Decoy accounts and credentials that expose identity attacks and credential misuse early.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":109,"product_name":110,"url":111,"description":112},"identity-threat-protection","Okta Identity Threat Protection","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fidentity-threat-protection\u002F","Continuous risk assessment of sessions after login, with automatic actions such as ending sessions.",{"slug":114,"name":115,"problem":116,"products":117},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[118,126,134],{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":122,"product_name":123,"url":124,"description":125},"github","GitHub","\u002Fvendor-logos\u002Fgithub.png","advanced-security","GitHub Advanced Security","https:\u002F\u002Fgithub.com\u002Fsecurity\u002Fadvanced-security","Dependency review, code scanning and secret scanning with push protection.",{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":130,"product_name":131,"url":132,"description":133},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":135,"vendor_name":136,"vendor_logo":137,"product_slug":138,"product_name":139,"url":140,"description":141},"gitguardian","GitGuardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",[],{"slug":144,"title":145,"body":146,"framework_refs":147,"framework_notes":159},"docker-hub-flaw-allowed-cross-user-image-manipulation-for-over-two-years","Docker Hub Flaw Allowed Cross-User Image Manipulation for Over Two Years","A critical authentication or authorization flaw in Docker Hub permitted one authenticated user to push, pull, or delete container images belonging to another user, earning a CVSS score of 9.4. The vulnerability went undetected and unpatched for more than two years, representing a significant window of exposure in a widely trusted software supply chain platform. Had the flaw been exploited, adversaries could have silently injected malicious code into legitimate container images, potentially compromising thousands of downstream deployments. This incident highlights the danger of privilege boundary failures in shared, multi-tenant platforms where trust in publisher identity is foundational to security.",[148,149,150,151,152,153,154,155,156,157,158],"CIS Control 2: Inventory and Control of Software Assets","CIS Control 7: Continuous Vulnerability Management","CIS Control 16: Application Software Security","NIST SP 800-53 AC-3: Access Enforcement","NIST SP 800-53 AC-6: Least Privilege","NIST SP 800-53 SA-10: Developer Configuration Management","NIST SP 800-161: Supply Chain Risk Management","NIST SSDF PW.4: Reuse Existing, Well-Secured Software","SLSA Supply Chain Levels for Software Artifacts (Level 3+)","GDPR Article 32: Security of Processing (if EU user data involved in affected images)","ITIL Change Management: Emergency Change procedures for critical vendor patches",{}]