
Trivy under attack supply chain exposes credentials in pipelines
Just a few days ago the community of developers and security teams received a disturbing news: the popular security scanner Trivy was used as a vector in a supply chain attack. Re…
News related to computer security, privacy and data protection

Just a few days ago the community of developers and security teams received a disturbing news: the popular security scanner Trivy was used as a vector in a supply chain attack. Re…

In recent weeks, security agencies in several countries have turned on alarms by a phishing campaign aimed at commercial messaging applications such as WhatsApp and Signal. Americ…

Oracle has published security updates to correct critical vulnerability that affects two of its identity management and web services products. The failure, identified as CVE-2026-…

In recent days the community of developers has received a serious alert: a chain of engagement initiated in the popular Trivy scanner seems to have derived into a wave of manipula…

The past FBI public notice puts in large letters something many experts were suspicious of: there are phishing campaigns that are taking account of encrypted messaging application…

The software supply chain again demonstrated its fragility when Trivy, the popular open source vulnerability scanner maintained by Aqua Security, suffered a second commitment in a…

Oracle has published an off-schedule patch to correct a critical failure that allows the remote code execution without authentication in two corporate components: Identity Manager…

A serious security failure in Langflow recently put an uncomfortable reality on the table again: open tools for building and orchestrating IA models are now attractive targets for…

The U.S. Infrastructure and Cybersecurity Security Agency (CISA) has ordered federal agencies to urgently address the most serious vulnerability in the Cisco firewall management s…