TGViewer
Reverse Dungeon Reverse Dungeon @reverse_dungeon · 5.01K subscribers
Post #4080 1.76K
https://socket.dev/blog/trivy-under-attack-again-github-actions-compromise

https://github.com/aquasecurity/trivy/discussions/10420
https://github.com/aquasecurity/trivy-action/issues/541

https://socket.dev/actions/package/aquasecurity/trivy-action/files/ddb9da4475c1cef7d5389062bdfdfbdbd1394648/entrypoint.sh

https://diary.shift-js.info/trivy-compromise/
socket.dev Trivy Under Attack Again: Widespread GitHub Actions Tag Compromise Exposes CI/CD Secrets Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.
Open in Telegram All posts from @reverse_dungeon
More from @reverse_dungeon
  1. Sep 24, 2026Вспомнилось ! Был такой хороший гайд Introduction to Exploit Development Сегодня он интере…
  2. Sep 20, 2026https://bogdanthegeek.github.io/blog/projects/vapeserver/
  3. Sep 18, 2026Golang loader that uses vulnerable drivers to terminate EDR and antivirus processes before…
  4. Sep 16, 2026www.f6.ru/blog/fmvt-rat
  5. Sep 9, 2026https://hunt.io/blog/redis-cryptomining-botnet-3562-servers TL;DR: Челы из Hunt.io вскрыли…
  6. Aug 31, 2026https://securelist.ru/tr/armored-likho-campaigns-with-busysnake-rat-and-kharon-rat/116658
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →