“Shockingly, a follow-up scan in 2024 still showed more than 10,000 unsecured registries.”
A 2022 scan of the whole IPv4 internet found over 21,000 container registries open to anyone. Two years later more than 10,000 were still open, leaking TP-Link cloud service code and payment service credentials. The researcher pushed a test image to more than 4,500 of them because nothing stopped him. Anyone less polite can swap a backdoored image into a production pipeline the same way.