Tracked topic
Trivy is an open source vulnerability scanner for container images, files, and code that detects known security issues in software dependencies.
They Got Trivy. They Got Axios. Now They're Coming for the Linux Foundation.
It's Bigger Than TeamPCP. Open Source Is Under Siege.
Cyclic Redundancy Check (CRC) - Computerphile
CopyFail Compromises The Last 9 Years Of Linux Distros
They're Getting Faster. Open Source Is Under Attack Right Now.
Linux’s Biggest Win Yet - WAN Show April 24, 2026
…Personally, I can see why the dragon - a mount which trivializes the game's big focus on exploration and many enemy encounters - is an 'ultimate weapon', so to speak, but considering how…
…A 4GB download is trivial on an unlimited fiber connection, but that is very much not the global norm , nor is it common even in the United States. For users whose data…
…TeamPCP is a cloud-focused threat group known for high-profile supply-chain breaches against Aqua Security’s Trivy scanner, the LiteLMM and Telnyx PyPI packages, and more recently, SAP npm packages…
…threat actor it tracks as UNC1069 - and not to TeamPCP, the group behind the recent Trivy vulnerability scanner breach and subsequent compromises targeting other popular open source projects . The axios supply-chain…
Copy Fail is a trivially exploitable logic bug in Linux, reachable on all major distros released in the last 9 years. A small, portable python script gets root on all platforms.
https://copy.fail/ 10 lines of python to gain root access on shared machines running Linux kernels from 2017 onward: https://github.com/theori-io/copy-fail-CVE-2026-31431 Edit: for those that want an un-minimized version…
They shipped an impressive new release that I wanted to share, since it helped me so much over the past few years. I used this heavily at a previous job, monitoring several thousand TLS Secrets across k8s clusters with. …
I work as a SAP Integration consultant and built this as a side project. Friction point: Most self hosted LLM observability tools require Postgres, Redis and non trivial infrastructure. Teams just want to see what their …
I keep hearing that SaaS is dead. People ask why they’d pay for SaaS anymore, “Can’t I just build it myself with Claude?”On the surface, it sounds reasonable. But after a decade of building software professionally, I can…
…that it's an expert programmer makes it a worse programmer LiteLLM loses game of Trivy pursuit, gets compromised AI isn't killing jobs, it's 'unbundling' them into lower-paid chunks…
…connect to the internet or use Bluetooth.” But clearing them for flight wasn’t a trivial task, according to the report : “Typically, the process has four phases, (Tobias Niederwieser, an assistant research…
…More recent supply-chain attacks have hit Trivy, Checkmarx, and Bitwarden and more than 150 packages available through open source repositories. Last year, there were at least six notable such attacks. Anyone…
…signed malicious TanStack, Mistral npm packages Bitwarden CLI npm package compromised to steal developer credentials Trivy vulnerability scanner breach pushed infostealer via GitHub Actions Breach npm OpenAI Shai Hulud Supply Chain Attack…
…Just be careful not to go overboard if you’re not looking to trivialize the challenge of Saros altogether. Builds like this can make the roguelike aspect of the game entirely moot…
…Wordle's popularity—LinkedIn launched three "thinking-oriented games," Vulture unveiled the grid-based movie trivia guessing game Cinematrix , and the subscription-based games platform Puzzmo was around in 2023. Puzzmo was…