The Trivy vulnerability scanner was compromised in a supply-chain attack by threat actors known as TeamPCP, which distributed ...

If you suspect you were running a compromised version, treat all pipeline secrets as compromised and rotate immediately,’ Trivy maintainer says.

Trivy attack force-pushed 75 tags via GitHub Actions, exposing CI/CD secrets, enabling data theft and persistence across developer systems.

Hackers have compromised virtually all versions of Aqua Security’s widely used Trivy vulnerability scanner in an ongoing ...

Qualys reports the discovery by their threat research unit of vulnerabilities in the Linux AppArmor system used by SUSE, Debian, Ubuntu, and ...

The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...

Every time Henry publishes a story, you’ll get an alert straight to your inbox! Enter your email By clicking “Sign up”, you agree to receive emails from ...

A new entity, TikTok USDS Joint Venture LLC, was created to comply with a Trump-era executive order. Some users are deleting their accounts in protest over the new ownership structure and its ...

The federal government said it's no longer going to pursue criminal charges for tampering with emissions equipment. But civil charges are still on the table. The U.S. Department of Justice has ordered ...

TikTok users have been deleting the app at a higher rate since the company announced that its U.S. operations would be housed in a new joint venture. The daily average of U.S. users deleting the ...

TikTok users are reportedly deleting their accounts in protest after the platform announced its new American‑controlled ownership. The update, posted on January 23, outlined the creation of TikTok ...

Philadelphia sued the Trump administration after it directed the Park Service to rip out a memorial to slavery. Elsewhere, materials about climate change and labor history were being removed. By ...