--- title: When it Comes to Container Security Enterprises Are Their Own Worst Enemy description: When it Comes to Container Security Enterprises Are Their Own Worst Enemy image: https://businessinsights.bitdefender.com/hubfs/bitdefender-presents-revolutionary-data-center-security-and-citrix-synergy-2017-1.jpg --- [![](https://businessinsights.bitdefender.com/hubfs/2021/09/logo-white.svg)](https://businessinsights.bitdefender.com/?hsLang=en-us) [![CONTACT AN EXPERT](https://hubspot-no-cache-eu1-prod.s3.amazonaws.com/cta/default/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd.png)](https://hubspot-cta-redirect-eu1-prod.s3.amazonaws.com/cta/redirect/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd) - [For Home](https://www.bitdefender.com/solutions/) - [For Business](https://www.bitdefender.com/business/) - [Resources](https://www.bitdefender.com/business/resource-library.html) - [Webinars](https://www.bitdefender.com/business/webinars.html) # [BUSINESS INSIGHTS](https://businessinsights.bitdefender.com/?hsLang=en-us) By [**George V. Hulme**](https://businessinsights.bitdefender.com/author/george-v-hulme) / Oct 16, 2018 # When it Comes to Container Security Enterprises Are Their Own Worst Enemy Share this [![Share on email](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/email-color.png)](mailto:?subject=Check%20out%20https://businessinsights.bitdefender.com/container-security-enterprises-enemy&utm_medium=social&utm_source=email%20&body=Check%20out%20https://businessinsights.bitdefender.com/container-security-enterprises-enemy&utm_medium=social&utm_source=email) [![Share on twitter](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/twitter-color.png)](https://twitter.com/intent/tweet?original_referer=https://businessinsights.bitdefender.com/container-security-enterprises-enemy&utm_medium=social&utm_source=twitter&url=https://businessinsights.bitdefender.com/container-security-enterprises-enemy&utm_medium=social&utm_source=twitter&source=tweetbutton&text=) [![Share on linkedin](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/linkedin-color.png)](http://www.linkedin.com/shareArticle?mini=true&url=https://businessinsights.bitdefender.com/container-security-enterprises-enemy&utm_medium=social&utm_source=linkedin) [![Share on facebook](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/facebook-color.png)](http://www.facebook.com/share.php?u=https://businessinsights.bitdefender.com/container-security-enterprises-enemy&utm_medium=social&utm_source=facebook) Much like the early days of virtualization, containers got a bum rap when it came to data security. I say this because just like virtualization, securing containers is more about securing what is happening inside, rather than the security of the wrapper. As we asked a few years ago what are the [impact of containers on security](https://businessinsights.bitdefender.com/containers-impact-security?hsLang=en-us)? Recently, container security vendor Twistlock set out to answer that. They examined some real-world container data. What did they find? They found the same issues that have always plagued IT systems are the Achilles heel of container security – that it’s the vulnerabilities within containers that are the most significant weakness and not container technologies itself. The key findings from the report are: - Surveying use of the top cloud-native applications, 25 percent were running with CVEs where a known exploit exists - MySQL was the most likely to be out of date, with over 80 percent of deployments being at least one version behind. Overall, 60 percent of all cloud-native apps are not patched to the latest version - Over 90 percent of detected attacks were automatically executed — zero touch hacking that focuses on brute force or known exploits - China plays a significant role in the modern threat landscape with over 60 percent of detected attacks against cloud-native applications originated from Chinese IP ranges These findings are just inexplicable: 60 percent of all cloud-native apps are maintained up to date, and 25 percent of applications were running versions of software with known exploits circulating. If organizations want to secure themselves from attack, they have to make sure their software is patched to the latest versions.  How did Twistlock come at these results? The vendor used two techniques. The first was to scan the internet using publicly accessible scanning services to vet open servers. According to the report, form those scans they identified a small list of commonly used applications from Docker Hub. The researchers then assessed their banners for potential vulnerabilities. “The main goal of this search was to sample the version distribution for each application, and more specifically the percentage of applications that are potentially (or clearly) vulnerable to known security issues,” the report said. Secondly, the team deployed honeypots that targeted a number of popular cloud-native exploitations. The goal was to identify active patterns of attacks and vulnerabilities actively being exploited. Twistlock said that they hope the report helps organizations to understand better new attack vectors and threats that face today's applications, improve their ability to manage software updates, workflows better, and patching cadence, and identify the benefits from deploying security defenses that can stop automated threats. They certainly proved that enterprises are their own worst enemies. If enterprises stuck to good practices for mitigating risk, such as running assessments and patching and maintaining good configuration management, containers can be useful for security. However, as Twistlock demonstrated, the metadata containers hold make it possible to identify what is in the container, see what is vulnerable as well as assess the value of the data in the container. When managed properly, because containers are discrete systems, the attack surface of applications can be limited as services necessary to run an application can be limited to just that container. Containers also make security automation much more straightforward. Of course, enterprises must take advantage of these capabilities and cover the security basics, or they'll remain as vulnerable as always. ### Explore More Topics - [Enterprise Security (765)](https://businessinsights.bitdefender.com/topic/enterprise-security) - [Threat Research (206)](https://businessinsights.bitdefender.com/topic/threat-research) - [SMB Security (193)](https://businessinsights.bitdefender.com/topic/smb-security) - [Cloud Security (174)](https://businessinsights.bitdefender.com/topic/cloud-security) - [Ransomware (172)](https://businessinsights.bitdefender.com/topic/ransomware) - [Privacy and Data Protection (139)](https://businessinsights.bitdefender.com/topic/privacy-and-data-protection) - [Cybersecurity Awareness (136)](https://businessinsights.bitdefender.com/topic/cybersecurity-awareness) - [Endpoint Protection & Management (136)](https://businessinsights.bitdefender.com/topic/endpoint-protection-management) - [Endpoint Detection and Response (127)](https://businessinsights.bitdefender.com/topic/endpoint-detection-and-response) - [Managed Detection and Response (121)](https://businessinsights.bitdefender.com/topic/managed-detection-and-response) - [Threat Intelligence (82)](https://businessinsights.bitdefender.com/topic/threat-intelligence) - [Virtualization & Data Center Security (82)](https://businessinsights.bitdefender.com/topic/virtualization-data-center-security) - [IT Compliance & Regulations (75)](https://businessinsights.bitdefender.com/topic/it-compliance-regulations) - [Bitdefender Threat Debrief (59)](https://businessinsights.bitdefender.com/topic/bitdefender-threat-debrief) - [Managed Service Providers (55)](https://businessinsights.bitdefender.com/topic/managed-service-providers) - [#Featured (52)](https://businessinsights.bitdefender.com/topic/featured) - [Advanced Persistent Threats (47)](https://businessinsights.bitdefender.com/topic/advanced-persistent-threats) - [Events (39)](https://businessinsights.bitdefender.com/topic/events) - [Independent Testing (24)](https://businessinsights.bitdefender.com/topic/independent-testing) - [Cybersecurity Advisory Services (10)](https://businessinsights.bitdefender.com/topic/cybersecurity-advisory-services) - [Podcast (5)](https://businessinsights.bitdefender.com/topic/podcast) - [AI (2)](https://businessinsights.bitdefender.com/topic/ai) - [top (2)](https://businessinsights.bitdefender.com/topic/top) See all topics ### Subscribe to Blog Updates ## Read more about this topic ### [The Future of the Container Security for SMBs](https://businessinsights.bitdefender.com/the-future-of-the-container-security-for-smbs?hsLang=en-us) ### [Considering Endpoint Detection and Response? What’s the best EDR choice for your business?](https://businessinsights.bitdefender.com/considering-endpoint-detection-response-edr-choice-business?hsLang=en-us) ### [How Container Workloads Are Changing The Future of Cybersecurity](https://businessinsights.bitdefender.com/how-container-workloads-are-changing-the-future-of-cybersecurity?hsLang=en-us) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2685110570-png/Bitdefender-Mar2015-Theme/Images/avatar_img_footer.png) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2676149282-png/Bitdefender-Mar2015-Theme/Images/logo_white_footer.png) - [![https://twitter.com/Bitdefender\_Ent](https://businessinsights.bitdefender.com/hs-fs/file-2658233851-png/Bitdefender-Mar2015-Theme/Images/ft_soc_tw.png?width=33&name=ft_soc_tw.png)](https://twitter.com/Bitdefender_Ent) - [![Linkedin-icon-300x300](https://businessinsights.bitdefender.com/hs-fs/hubfs/Bitdefender-Mar2015-Theme/Images/Linkedin-icon-300x300.png?width=33&name=Linkedin-icon-300x300.png)](https://www.linkedin.com/company/bitdefender-gravityzone-enterprise-security) - [![](https://businessinsights.bitdefender.com/hs-fs/file-2676149307-png/Bitdefender-Mar2015-Theme/Images/ft_soc_yt.png)](https://www.youtube.com/user/BitdefenderSecurity) - [Legal Terms](https://www.bitdefender.com/legal/) - [Privacy Policy](https://www.bitdefender.com/site/view/legal-privacy-policy-for-bitdefender-websites.html) - [EULA](https://www.bitdefender.com/site/view/legal-eula.html) - [Contact Us](https://www.bitdefender.com/business/contact.html) Copyright © 1997-2023 Bitdefender All rights reserved. ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "George V. Hulme", "url" : "https://businessinsights.bitdefender.com/author/george-v-hulme" }, "datePublished" : "2018-10-16T07:23:14.000Z", "headline" : "When it Comes to Container Security Enterprises Are Their Own Worst Enemy", "image" : [ "https://businessinsights.bitdefender.com/hubfs/bitdefender-presents-revolutionary-data-center-security-and-citrix-synergy-2017-1.jpg" ], "mainEntityOfPage" : { "@id" : "https://businessinsights.bitdefender.com/container-security-enterprises-enemy", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://businessinsights.bitdefender.com/hubfs/Bitdefender_Logo_Transparent-2.png" }, "name" : "Bitdefender" } } ```