The first thing that comes to mind is the recent article on the front page about the docker footgun/default that allowed a hacker to wipe a website's database.