Dependency Confusions in Docker and remote pwning of your infra
Docker dependency confusion occurs when a misconfigured Docker mirror pulls malicious public images instead of private ones.
- from
- CI/CD Attacks
- added
- 2026-10-10
- likes
- 0
similar
-
Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies medium.com
Researchers uploaded malicious packages with internal company names, gaining access to Apple, Microsoft, and others due to dependency confusion.
-
Cyware Threat Response Docker hub.docker.com
-
-
Hacking GitHub AWS integrations again dagrz.com
Attacking misconfigured pipelines that use OIDC.
-
How I hacked into Google's internal corporate assets observationsinsecurity.com
More ways to find dependencies in code for Dependency Confusion.
-
Bringing new security features to Docker opensource.com
CI/CD Attacks › Techniques > Initial Code Execution: “Docker dependency confusion occurs when a misconfigured Docker mirror pulls malicious public images instead of private ones.”