10K DOCKER IMAGES SPRAY LIVE CLOUD CREDS ACROSS THE INTERNET

Summary from the TLDR InfoSec newsletter

Flare's research reveals that over 10,000 public Docker Hub images expose active secrets from more than 100 organizations, including a Fortune 500 company and a major bank, often via personal or “shadow IT” accounts. These images leak API keys and other live credentials for cloud, CI/CD, and AI services, and even when secrets are removed from images, about three-quarters of the underlying keys remain valid, leaving organizations open to compromise.