A threat actor used the open source security tool to deploy an infostealer into CI/CD workflows and steal cloud credentials, SSH keys, tokens, and other sensitive secrets.
🟡VulnerabilitiesMEDIUM
Trivy Supply Chain Attack Targets CI/CD Secrets
A threat actor used the open source security tool to deploy an infostealer into CI/CD workflows and steal cloud credentials, SSH keys, tokens, and other sensitive secrets.
Source attribution: via Dark Reading. HackWire aggregates and contextualizes publicly reported cybersecurity news for informational purposes.