Companies Struggle with Cloud Security Amid Growing Complexity; Docker Introduces Affordable Hardened Container Images
Tenable's report reveals major cloud security challenges for companies managing hybrid and multicloud environments, while Docker launches affordable hardened container images to boost security for SMEs.
- • 82% of companies operate hybrid cloud environments, 63% use multiple clouds
- • Increased complexity leads to security blind spots and AI-driven vulnerabilities
- • Traditional tools struggle with AI-related security risks
- • Docker offers affordable hardened container images with near-zero CVE approach
- • Docker Hardened Images are smaller, continuously patched, and independently validated
Key details
A recent report by Tenable highlights that 82% of companies operate hybrid cloud environments and 63% use multiple cloud providers, managing an average of 2.7 environments each. This landscape creates significant security challenges, including blind spots due to fragmented tools, inconsistent identity management, and gaps in risk monitoring. AI-driven identities further amplify vulnerabilities due to inconsistent governance and excessive permissions. Liat Hayun, VP of Product and Research at Tenable, noted that traditional security tools are inadequate for managing the risks associated with AI workloads, leaving many firms without comprehensive policy enforcement or risk oversight.
In response to mounting security concerns, Docker has launched a new initiative making secure container images more affordable for development teams, especially small and medium enterprises. Docker's Hardened Images offer a near-zero Common Vulnerabilities and Exposures (CVE) profile, being built from source code, continuously patched, and stripped of unnecessary components, resulting in images up to 95% smaller than usual. These images comply with SLSA-Level 3 and include transparency tools like the Vulnerability Exploitability eXchange to help teams focus on relevant security issues. Docker also commits to patch vulnerabilities within seven days. Independent assessments by SRLabs confirm the hardened images are signed, run rootless by default, and come with software bill of materials (SBOM). This offering supports various Linux distributions and development needs, including AI and machine learning workloads, aiming to simplify secure container adoption amidst growing cloud security challenges (Source IDs: 92433, 92427).