On the morning of March 24, 2026, tens of thousands of software developers working on AI applications were unknowingly exposed to malware.
After hacking Trivy, TeamPCP moved to compromise repositories across NPM, Docker Hub, VS Code, and PyPI, stealing over 300GB ...
The compromised packages, linked to the Trivy breach, executed a three‑stage payload targeting AWS, GCP, Azure, Kubernetes ...
Threat actors abused trusted Trivy distribution channels to inject credential‑stealing malware into CI/CD pipelines worldwide ...
On March 19, 2026, a threat actor known as TeamPCP compromised Aqua Security’s Trivy vulnerability scanner – the most widely adopted open-source scanner in the cloud-native ecosystem. The attacker ...
Aqua Security’s Trivy vulnerability scanner was compromised in a supply chain attack, leading to information-stealing ...
If you suspect you were running a compromised version, treat all pipeline secrets as compromised and rotate immediately,’ ...
This article introduces practical methods for evaluating AI agents operating in real-world environments. It explains how to ...
Infosecurity spoke to several experts to explore what CISOs should do to contain the viral AI agent tool’s security vulnerabilities ...
MIAMI — Mayling Maya-Giraldo pretended to be a doctor who could perform cosmetic procedures, according to Miami-Dade Sheriff’s Office deputies. Maya-Giraldo, 31, was Instagram user “Dra.Mayling.Stetic ...
Apple's camera and microphone indicators are supposed to tell iPhone users when the microphone or camera are on, but after a device is fully compromised with kernel-level access by another hack, ...
Figma and Anthropic are partnering on AI coding tools that integrate Claude Code. Software stocks have sold off as AI tools threaten to upend the industry. Figma reports earnings Wednesday. The stock ...