Docker Introduces Hardened Desktop for Business Users

The latest release of Docker Desktop introduces a new security model to help sys admins secure their organizations’ supply chains. Dubbed Hardened Desktop and available only to business customers, the new model includes Settings Management and Enhanced Container Isolation.

Threat-Detection Tool Falco Now Supports Multiple Event Sources, Syscall Selection, and More

The latest release of Falco adds the ability to handle multiple simultaneous event sources within the same instance, support for selecting which syscalls to capture, a new Kernel Crawler to collect the most recent supported kernel versions, and more.

OpenSSL Hit by Two High Severity Vulnerabilities, Recently Patched

Introduced in OpenSSL 3.0 in September 2021 and affecting all successive versions up to and including OpenSSL 3.0.6, the two recently patched vulnerabilities are caused by buffer overruns in X.509 certificate verification.

Docker Desktop 4.14 Adds Resource Usage Monitor and Vulnerability Discovery

The latest version of Docker Desktop introduces a number of new features, including resource usage monitor and vulnerability discovery. Additionally, Docker Desktop 4.14 adopts the latest Docker Engine, Docker Compose, and Containerd releases.

Heuristic-BStatic Analysis Tool GuardDog Used to Detect Several Malicious PyPi Packages

GuardDog is new open source tool aimed at identifying malicious Python Packages using Sempreg and package metadata analysis. Thanks to a set of source code heuristics, GuardDog can detect malicious packages never seen before and has been used to identify several malicious PyPi packages in the wild.