“This also meant that it was exposed to the internet, with open ports in the router firewall and everything.”
A Postgres container with open router ports got owned by Kinsing. The miner ran two cores at 100% for over eight days. The only alarm was the fan.