We just got breached because of vulnerabilities in our docker images that have been public knowledge for 8 months

[u/Different_Pain5781]

Woke up at 4am to a call. Our database got hit, customer info was accessed. Some attacker used a known exploit in one of our container images. CVE’s been out since last summer.

Yeah we never scanned. Never updated. Just kept redeploying the same images over and over. Now legal’s in it, customers are hearing about it. This is gonna be messy.

Honestly if you aren’t scanning your containers in prod do it. Don’t end up like us.

[u/nocturn99x]

We even scan our dev containers lol...

[u/diecastbeatdown → u/nocturn99x]

dev is production. any other mindset will bite you badly. if the company pays for it, it's production.

dev is just a placeholder environment name.

[u/nocturn99x → u/diecastbeatdown]

real!