Tracked topic
Trivy is an open source vulnerability scanner for container images, files, and code that detects known security issues in software dependencies.
Security LiteLLM loses game of Trivy pursuit, gets compromised Python interface for LLMs infected with malware via polluted CI/CD pipeline Two versions of LiteLLM, an open source interface for accessing multiple…
RSA 1K+ cloud environments infected following Trivy supply chain attack Crims 'creating a snowball effect' across open source projects RSAC 2026 Thousands of organizations' cloud environments have been infected with secret-stealing…
Cyber-crime Telnyx joins LiteLLM in latest PyPI package poisoning tied to Trivy breach Also, EU probes Snapchat, RedLine suspect extradited, AstraZeneca leak claim surfaces, and more INFOSEC IN BRIEF The cybercrime…
…Following a report that TeamPCP also breached Cisco's internal development environment and stole source code from credentials swiped via the Trivy attack, Cisco told The Register that it is "aware of…
…threat actor it tracks as UNC1069 - and not to TeamPCP, the group behind the recent Trivy vulnerability scanner breach and subsequent compromises targeting other popular open source projects . The axios supply-chain…
…First, attackers hit Trivy , a vulnerability scanner with more than 100,000 users and contributors that is embedded in thousands of CI/CD pipelines. Up next: Axios , an open-source JavaScript library…
…First, attackers hit Trivy , a vulnerability scanner with more than 100,000 users and contributors that is embedded in thousands of CI/CD pipelines. Later in the month, North Korea-linked attackers…
…that it's an expert programmer makes it a worse programmer LiteLLM loses game of Trivy pursuit, gets compromised AI isn't killing jobs, it's 'unbundling' them into lower-paid chunks…
…MORE CONTEXT Anthropic struggling with Chinese competition, its own safety obsession OpenAI patches ChatGPT flaw that smuggled data over DNS Telnyx joins LiteLLM in latest PyPI package poisoning tied to Trivy breach…
…many deployments still rely on default credentials – the ever-reliable "admin:admin" – making initial access trivial. Worse, on certain versions (6.0.0 through 6.1.1), an older flaw, CVE-2024…