Security & Privacy
The Trivy Supply Chain Ambush: How a Vulnerability Scanner Became the Attack Vector
Between March 19 and 23, 2026, threat actors compromised Aqua Security's CI/CD pipeline and poisoned Trivy images with malware. If you pulled the wrong version, your secrets are at risk.