Get the latest tech news

How the Trivy supply chain attack harvested credentials from secrets managers

Trivy v0.69.4 silently harvested credentials from thousands of CI/CD pipelines. The secrets managers didn't help. Here's why — and what does.

None

Related news:

Cisco source code stolen in Trivy-linked dev environment breach

Telnyx joins LiteLLM in latest PyPI package poisoning tied to Trivy breach

1K+ cloud environments infected following Trivy supply chain attack