FEATURE Two supply chain attacks in March infected open source tools with malware and used this access to steal secrets from ...

Spread the loveIn a chilling reminder of the vulnerabilities inherent in open source software, two significant supply chain attacks occurred in March 2026, targeting widely used tools that affect a ...

A major security incident affecting the widely used open source vulnerability scanner Trivy has exposed critical weaknesses ...

Breakdown of the Trivy GitHub Actions attack, including workflow misconfigurations, token theft, and supply chain exposure.

Aqua Security, a pioneer in cloud native security and the primary maintainer of Aqua Trivy, is launching the Trivy Partner Connect Program, expanding the commercial ecosystem around Trivy, an open ...

A vulnerability-discovery tool built by Anthropic has identified a serious flaw in FreeBSD’s Network File System, a component ...

Claude Mythos discovered vulnerabilities that survived 27 years of human review. This technical breakdown covers how it works ...

New vulnerabilities in Apache Traffic Server highlight the growing security burden facing critical open-source infrastructure ...

OpenAI has launched Codex Security, an AI-powered vulnerability scanner, in research preview for ChatGPT Pro, Enterprise, and Edu users. Formerly known as Aardvark, the tool aims to reduce false ...