Trivy Scanner Hit by Major Supply Chain Attack

  Aqua Security’s popular open-source vulnerability scanner, Trivy, has been compromised in an ongoing supply chain attack that began in late February 2026 and escalated dramatically by mid-March. Threat actors exploited misconfigurations in Trivy’s GitHub Actions workflows, stealing privileged tokens…

Read more →

The post Trivy Scanner Hit by Major Supply Chain Attack appeared first on IT Security News.