CERT-EU attributed a 92 GB data breach at the European Commission to TeamPCP, which compromised the Trivy security scanner in ...

A major security incident affecting the widely used open source vulnerability scanner Trivy has exposed critical weaknesses ...

The open-source supply chain hack represents “meaningful industry-wide risk”, according to an industry expert.

Or, why the software supply chain should be treated as critical infrastructure with guardrails built in at every layer.