Research reports
1,224 reports from 387 publishers45 added in the past week
1 report, newest added first
Added Thu 6 Aug
TeamPCP expands: Supply chain compromise spreads from Trivy to Checkmarx GitHub Actions
On March 19, 2026, the threat actor known as TeamPCP compromised Aqua Security's Trivy vulnerability scanner and its associated GitHub Actions, injecting a credential-stealing payload into CI/CD pipelines across thousands of repositories. The incident was…
Supply chain
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.