Aqua Security’s Trivy vulnerability scanner was compromised in a supply chain attack, leading to information-stealing ...
Trivy attack force-pushed 75 tags via GitHub Actions, exposing CI/CD secrets, enabling data theft and persistence across ...
Hackers have compromised virtually all versions of Aqua Security’s widely used Trivy vulnerability scanner in an ongoing ...
After hacking Trivy, TeamPCP moved to compromise repositories across NPM, Docker Hub, VS Code, and PyPI, stealing over 300GB ...
Hackers breach Checkmarx developer tools to steal sensitive data, exposing risks in widely used software systems.
If you suspect you were running a compromised version, treat all pipeline secrets as compromised and rotate immediately,’ ...
The Trivy story is moving quickly, and the latest reporting makes one thing clear: this is no longer just a GitHub Actions ...
Two more GitHub Actions workflows have become the latest to be compromised by credential-stealing malware by a threat actor ...
Security researchers at BeyondTrust Phantom Labs discovered a critical flaw in OpenAI's Codex coding agent that allowed an ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results