TGViewer
DevOps & SRE notes DevOps & SRE notes @devops_sre_notes · 13.3K subscribers
Post #2649 3.98K
DevOps & SRE notes 🚨 Trivy has been hacked, again. --- What happened? Attackers compromised the official aquasecurity/trivy-action GitHub Action — the one people use to run Trivy vulnerability scans in CI/CD pipelines. This was disclosed today (March 20, 2026). It's the…
Tech giants under attack by a Trivy-compromised GitHub action.

Cisco – More than 300 GitHub repositories were cloned during the incident, including source code for its AI-powered products, such as AI Assistants, AI Defense, and unreleased products. A portion of the stolen repositories allegedly belongs to corporate customers, including banks, BPOs, and US government agencies.

https://www.bleepingcomputer.com/news/security/cisco-source-code-stolen-in-trivy-linked-dev-environment-breach/
BleepingComputer Cisco source code stolen in Trivy-linked dev environment breach Cisco has suffered a cyberattack after threat actors used stolen credentials from the recent Trivy supply chain attack to breach its internal development environment and steal source code belonging to the company and its customers.
  • 👏 5
  • ❤ 1
Open in Telegram All posts from @devops_sre_notes
More from @devops_sre_notes
  1. Sep 25, 2026Post #2750
  2. Sep 24, 2026Post #2749
  3. Sep 23, 2026Post #2747
  4. Sep 22, 2026Realtime log viewer with web UI, tail -f for logs with a web interface browser. https://gi…
  5. Sep 21, 2026Securing every Kubernetes workload at scale — LinkedIn Engineering https://www.linkedin.co…
  6. Sep 18, 2026Validate environment variable usage in codebase https://github.com/Chrilleweb/dotenv-diff
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →