01
Trivy Vulnerability Scanner Compromised in Supply Chain Attack
The Trivy vulnerability scanner was compromised in a supply chain attack, with threat actors deploying an infostealer via GitHub Actions. The attack involved the Trivy scanner being used to spread CanisterWorm across 47 npm packages. This incident highlights the risks associated with software supply chains and the need for rigorous security measures around CI/CD pipelines and third-party tool integrations.
SRC BleepingComputerThe Hacker News