UPDATED
Every story on Updated that mentions Kubernetes & Containers, newest first. Each headline links to a summary page with the original source, so you can scan the topic in under a minute.
NVIDIA Technical Blog ·
Many AI workloads need only a fraction of a GPU. Giving each one an entire device can leave capacity idle; sharing GPUs lets platform teams serve more workloads... Many AI workloads need only a fraction of a GPU.
NVIDIA Technical Blog ·
Training large-scale AI models on thousands of GPUs is a high-stakes operation where monitoring and automation must be built-in to optimize cluster resiliency... Training large-scale AI models on thousands of GPUs is a high-stakes...
Hacker News ·
AlienVault OTX · · Critical severity
LiteLLM version 1.107.0 was compromised through a supply chain attack affecting both PyPI packages and Docker images. The malicious release contains Python startup files that automatically execute upon Python initialization, stealing...
·
Fortanix® Inc., a global leader in data and AI security and pioneer of Confidential Computing, today announced support for CNCF Confidential Containers (CoCo) in Fortanix Confidential AI, enabling organizations to run AI workloads on...
SiliconANGLE ·
Data security company Fortanix Inc. today extended its Fortanix Confidential AI platform to support the Cloud Native Computing Foundation’s Confidential Containers project, so enterprises can run artificial intelligence workloads on...
Hacker News ·
Kubernetes Blog ·
You submit a Kubernetes Job and wait for its Pods to appear. The Job is still suspended, there are no application logs, and there may not even be a Pod to inspect. In a cluster managed by Kueue , this can be completely normal.
Help Net Security ·
Meshery is an open-source tool for designing, deploying and managing Kubernetes infrastructure, built by Layer5 and its community and hosted as a Cloud Native Computing Foundation project. Teams use it to lay out clusters and...
The Hacker News ·
A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it found no evidence that anyone exploited...
BleepingComputer · · Critical severity
Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using a personal access token (PAT).
Hacker News ·
Hacker News ·
Hacker News ·
Kubernetes Blog ·
In Linux, cgroups (control groups) are a kernel feature used for managing system resources. Kubernetes uses cgroups to allocate resources like CPU and memory to containers, ensuring that applications run smoothly without interfering...
CSO Online Security ·
Dell’s security team has had a busy week. The company has announced a slew of Common Vulnerabilities and Exposures (CVEs) impacting its Dell Container Storage Modules (CSM) and Dell System Update (DSU). Disclosed by Dell in two security...
Kubernetes Blog ·
Memory is often the first hard limit a Kubernetes cluster hits. Nodes run out of RAM long before they run out of CPU, and the new wave of agentic AI workloads makes this worse. These workloads demand large memory footprints to start up...
Hacker News ·
The Hacker News · · Medium severity
Dell has released security updates to address multiple critical security flaws in Dell Container Storage Modules (CSM) that could be exploited by bad actors to take over susceptible systems. The vulnerabilities are listed below -...
Help Net Security ·
10, 2024, the EU Cyber Resilience Act (CRA) is a regulation (EU 2024/2847) that defines mandatory cybersecurity requirements for all products with digital elements sold in EU markets. Reporting obligations will begin on Sept. 11, 2026,...
darkreading · · Medium severity
The botnet uses the open source Hermes Agent AI framework to execute commands via Telegram and steal AI API keys from exposed Docker hosts.
The Hacker News · · Medium severity
Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that's targeting exposed Docker daemons to deploy an open-source artificial intelligence (AI) agent framework called Hermes Agent. "The implant...
Ubuntu blog ·
A customer building a FedRAMP-compliant deployment found that Ubuntu Pro 22.04 FIPS container images were silently failing on standard, mainline Linux kernels, the kind used by managed Kubernetes environments such as AWS EKS and...
SecurityWeek ·
Noteworthy stories that might have slipped under the radar: BragJack attack against browser AI assistants, TDengine flaw threatens industrial telemetry uptime, Ubuntu update overhaul. The post In Other News: Clop Leak Site Takeover,...
Help Net Security ·
Docker has announced Docker Cloud Sandboxes, a new solution for secure, isolated AI agent execution that enables complex agentic workflows to continue running in the cloud long after a developer’s laptop shuts down. Launched at...
The Register ·
In a market where AI agents keep breaking the rules and escaping their containers, Docker has a new solution. On Thursday, the company debuted Cloud Sandboxes in a bid to keep AI agents within boundaries. Despite the existence and...
BleepingComputer · · Medium severity
A new botnet malware called Carbonato is targeting insecure hosts running Docker daemons to install the Hermes Agent AI framework and take control.
SiliconANGLE ·
Observability company groundcover Inc. today disclosed its first acquisition, picking up Kubernetes resource optimization startup Wand Cloud Ltd. Wand’s founders and employees are moving across to groundcover as part of the deal.
Tech.eu ·
Italy-based Clastix , a company developing technology for managing Kubernetes operations at scale, has raised €2.9 million in seed funding to expand its team and accelerate the development of its platform. The round was led by CDP...
NVIDIA Technical Blog ·
Kubernetes manages what runs on your nodes. Managing the nodes themselves is the challenge: kernel settings, system packages, storage layouts, security agents,... Kubernetes manages what runs on your nodes.
BleepingComputer ·
A Kubernetes user with limited permissions can potentially gain control of an entire Google Cloud organization by exploiting the authority granted to Google Kubernetes Config Connector. Varonis explains how this confused deputy problem...
Kubernetes Blog ·
Kubernetes v1.37 promotes the PersistentVolumeClaimUnusedSinceTime feature gate to Beta (enabled by default). With this feature, the PersistentVolumeClaim (PVC) protection controller adds an Unused condition to each PVC, telling you...
TechRadar ·
Millwall vs West Ham Free Streams: TV Channels, Kick-Off Time and Streaming Details for Dockers Derby in EFL Championship
Hacker News ·
The Hacker News · · Medium severity
Malicious code running inside a Docker Sandboxes virtual machine on macOS could escape the project directory shared into it and read or change files anywhere else on the host, Docker warns in a security announcement on September 15. The...
Kubernetes Blog ·
Kubernetes v1.37 brings important storage security features: emptyDir permission modes and bind mount options. They help application programmers and security professionals implement rigorous security policies, for example, prohibiting...
Kubernetes Blog ·
With the release of Kubernetes v1.37, the Pod-Level Resource Managers feature has graduated to Beta status (disabled by default)! First introduced as an Alpha feature in Kubernetes v1.36 , this enhancement builds on Pod-Level Resources...
NVIDIA Technical Blog ·
Federated learning (FL) projects often begin with a straightforward setup: one server, a few clients, and one dataset at each site. Federated learning (FL) projects often begin with a straightforward setup: one server, a few clients,...
Kubernetes Blog ·
Memory QoS has graduated to Beta in Kubernetes v1.37 and is now enabled by default. On Linux nodes running cgroup v2, the feature uses the memory controller to give the kernel better guidance on how to treat container memory. It was...
Kubernetes Blog ·
Changed Block Tracking (CBT) support for CSI drivers shipped as Alpha in September 2025. With the March 2026 v1.0.0 release of the external-snapshot-metadata project, the feature moved to Beta . If you aren't yet familiar with changed...
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free