The Trivy vulnerability scanner was compromised in a supply-chain attack by threat actors known as TeamPCP, which distributed ...

Trivy attack force-pushed 75 tags via GitHub Actions, exposing CI/CD secrets, enabling data theft and persistence across developer systems.

Hackers have compromised virtually all versions of Aqua Security’s widely used Trivy vulnerability scanner in an ongoing ...

If you suspect you were running a compromised version, treat all pipeline secrets as compromised and rotate immediately,’ Trivy maintainer says.

A new open-source tool called Betterleaks can scan directories, files, and git repositories and identify valid secrets using default or customized rules.

Cortex 3.0 delivers AI-powered code generation, vulnerability scanning, Enterprise AI & DevSecOps integrations, ...

This is according to GitGuardian’s latest report, the “State of Secrets Sprawl” paper that was just released. In the research ...

Vibe coding apps ship with alarming security flaws. What founders need to know about AI-generated code vulnerabilities in ...

GitGuardian, the security leader behind GitHub's most installed application, today released the 5th edition of its “ State of ...

Because attacker-supplied flow data is used in public flows, the bug leads to unauthenticated remote code execution.

Suman Basak's multi-agent AI system automates secure software development, reducing vulnerability remediation time by 96.5% ...