Follow the latest coverage, related explainers and connected technology stories.
Docker fixed a vulnerability in Docker Hub that automatically transferred personal access tokens when an account was converted into an organization, potentially granting an attacker the ability to interact with software images within another victim’s scope. The company said it found no evidence of exploitation, disabled the transferred tokens, and introduced new controls.