Trivy stories
Attackers hid malware in familiar package workflows, prompting Sonatype to log 21,764 malicious open-source packages in the quarter.
The malicious packages could leave build systems and Kubernetes clusters exposed, prompting checks across CI/CD pipelines and AI frameworks.
Aqua Security's Trivy GitHub Action was hijacked to ship infostealer code via CI/CD pipelines, exposing secrets across downstream users.
JFrog warns 13 GitHub CI/CD workflow flaws, mostly critical, could let attackers hijack pipelines and steal secrets at scale.
Aqua Security enhances its open-source solution, Trivy, to offer Kubernetes vulnerability scanning and Kubernetes Bill of Materials generation.
Aqua Security's Aqua Trivy now offers full compliance scanning for CIS Kubernetes Benchmarks, simplifying security for cloud native applications.
Aqua Security has added cloud security posture management (CPSM) capabilities to its open source tool, Aqua Trivy.
Aqua Security's Trivy becomes world's first unified scanner for cloud native security, consolidating multiple tools into one.
Attackers are now moving fast enough that patching delays, standing privilege and inherited trust leave organisations exposed within minutes.
Aqua Security launches Trivy Partner Connect to strengthen the ecosystem around its popular open source security scanner, Trivy, boosting collaboration and innovation.
