A major security incident affecting the widely used open source vulnerability scanner Trivy has exposed critical weaknesses ...

FEATURE Two supply chain attacks in March infected open source tools with malware and used this access to steal secrets from ...

Spread the loveIn a chilling reminder of the vulnerabilities inherent in open source software, two significant supply chain attacks occurred in March 2026, targeting widely used tools that affect a ...

Aqua Security, a pioneer in cloud native security and the primary maintainer of Aqua Trivy, is launching the Trivy Partner Connect Program, expanding the commercial ecosystem around Trivy, an open ...

CERT-EU has attributed a major data breach at the European Commission to cybercrime group TeamPCP, which exploited a supply chain attack on the open-source security tool Trivy to steal 92 GB of ...

The European Union’s Computer Emergency Response Team, CERT-EU, has traced last week’s theft of data from the Europa.eu platform to the recent supply chain attack on Aqua Security’s Trivy open-source ...

Open source container security improves audit readiness, reduces vulnerability remediation costs, enhances transparency ...

A vulnerability-discovery tool built by Anthropic has identified a serious flaw in FreeBSD’s Network File System, a component ...

Claude Mythos discovered vulnerabilities that survived 27 years of human review. This technical breakdown covers how it works ...

Finding vulnerabilities is something the industry has done well, but remediating them hasn't been. Just look at how many ...