SecurityBrief US - Technology news for CISOs & cybersecurity decision-makers
United States

Trivy Stories

American Stories

Trivy stories

Global Stories

Trivy stories

Sonatype warns of surge in trusted open-source malware
Application Security

Sonatype warns of surge in trusted open-source malware

Attackers hid malware in familiar package workflows, prompting Sonatype to log 21,764 malicious open-source packages in the quarter.

By Shannon Williams • 4 min read • Wed, 15th Apr 2026
AppOmni adds Heisenberg mode after LiteLLM supply attack
Virtualisation

AppOmni adds Heisenberg mode after LiteLLM supply attack

The malicious packages could leave build systems and Kubernetes clusters exposed, prompting checks across CI/CD pipelines and AI frameworks.

By Sean Mitchell • 4 min read • Fri, 27th Mar 2026
Trivy GitHub breach exposes CI/CD supply chain risk
DevOps

Trivy GitHub breach exposes CI/CD supply chain risk

Aqua Security's Trivy GitHub Action was hijacked to ship infostealer code via CI/CD pipelines, exposing secrets across downstream users.

By Sofiah Nichole Salivio • 5 min read • Tue, 24th Mar 2026
JFrog flags 13 critical CI/CD flaws in GitHub workflows
Security Information and Event Management

JFrog flags 13 critical CI/CD flaws in GitHub workflows

JFrog warns 13 GitHub CI/CD workflow flaws, mostly critical, could let attackers hijack pipelines and steal secrets at scale.

By Mark Tarre • 4 min read • Fri, 6th Mar 2026
Aqua Security expands Trivy for Kubernetes vulnerability scanning & KBOM generation
Application Security

Aqua Security expands Trivy for Kubernetes vulnerability scanning & KBOM generation

Aqua Security enhances its open-source solution, Trivy, to offer Kubernetes vulnerability scanning and Kubernetes Bill of Materials generation.

By Sean Mitchell • 2 min read • Wed, 8th Nov 2023
Aqua Security incorporates CIS Kubernetes benchmarks scanning into open source Trivy
Virtualisation

Aqua Security incorporates CIS Kubernetes benchmarks scanning into open source Trivy

Aqua Security's Aqua Trivy now offers full compliance scanning for CIS Kubernetes Benchmarks, simplifying security for cloud native applications.

By Shannon Williams • 3 min read • Thu, 20th Apr 2023
Aqua Security adds CPSM capabilities to Aqua Trivy
Cloud Security

Aqua Security adds CPSM capabilities to Aqua Trivy

Aqua Security has added cloud security posture management (CPSM) capabilities to its open source tool, Aqua Trivy.

By Zach Thompson • 3 min read • Thu, 18th Aug 2022
Aqua Security createa unified scanner for cloud native security
DevOps

Aqua Security createa unified scanner for cloud native security

Aqua Security's Trivy becomes world's first unified scanner for cloud native security, consolidating multiple tools into one.

By Shannon Williams • 3 min read • Fri, 20th May 2022

Stories from Other Regions

Trivy stories