The Trivy vulnerability scanner was compromised in a supply-chain attack by threat actors known as TeamPCP, which distributed ...

Trivy attack force-pushed 75 tags via GitHub Actions, exposing CI/CD secrets, enabling data theft and persistence across ...

ThreatsDay Bulletin covers stealthy attack trends, evolving phishing tactics, supply chain risks, and how familiar tools are ...

After hacking Trivy, TeamPCP moved to compromise repositories across NPM, Docker Hub, VS Code, and PyPI, stealing over 300GB ...

Hackers have compromised virtually all versions of Aqua Security’s widely used Trivy vulnerability scanner in an ongoing ...

Trivy是Aqua Security维护的一款热门开源漏洞扫描器，在一个月内第二次遭到攻击，恶意软件窃取了敏感的CI/CD机密信息。 最新事件影响了GitHub Actions中的"aquasecurity/trivy-action"和"aquasecurity/setup-trivy"，这两个工具分别用于扫描Docker容器镜像漏洞和在GitHub Actions工作流中设置特定版本的扫描器。

The Contagious Interview campaign weaponizes job recruitment to target developers. Threat actors pose as recruiters from crypto and AI companies and deliver backdoors such as OtterCookie and ...

作者 | 彭靖田在过去的一年里，我们被各种大模型的“闲聊”能力所震撼，但当激情褪去，企业和开发者面临的真正拷问是：它到底能不能替我干活？为了回馈大家的硬核学习热情，以及未能参与直播的朋友，我决定将昨天的直播精华内容，深度精编为 5 ...

Trivy是Aqua Security维护的一款热门开源漏洞扫描器，在一个月内第二次遭到攻击，恶意软件窃取了敏感的CI/CD机密信息。 最新事件影响了GitHub ...