FEATURE Two supply chain attacks in March infected open source tools with malware and used this access to steal secrets from ...
Breakdown of the Trivy GitHub Actions attack, including workflow misconfigurations, token theft, and supply chain exposure.
A major security incident affecting the widely used open source vulnerability scanner Trivy has exposed critical weaknesses ...
Aqua Security, a pioneer in cloud native security and the primary maintainer of Aqua Trivy, is launching the Trivy Partner Connect Program, expanding the commercial ecosystem around Trivy, an open ...
Open source components continue to cause huge problems for security practitioners, and AIxCC was created to determine whether automation could help close the gap. At DEF CON 33, DARPA announced the ...
CERT-EU attributed a 92 GB data breach at the European Commission to TeamPCP, which compromised the Trivy security scanner in ...
The latest trends and issues around the use of open source software in the enterprise. Sysdig is on a mission. That mission is one designed to unite millions of cloud security professionals and ...
Pervasive, evasive malware thought to have been eliminated has wormed its way back into development environments. Just a little over two weeks after GlassWorm was declared “fully contained and closed” ...