On March 24, 2026, malicious versions of the LiteLLM library (1.82.7 and 1.82.8) were hosted on the Python Package Index (PyPI) for approximately 40 minutes by threat actor Team PCP, exfiltrating 78,3…
A new guide outlines five practical steps to secure software supply chains, including sandboxing AI agents with Docker Sandboxes, freezing dependencies with a five-day cooldown, using hardened multi-s…
Docker AI Governance now streams every policy decision into the SIEM that security teams already use, providing a searchable record in Docker Cloud. The update follows a year in which supply-chain att…
Socket founder and CEO Feross Aboukhadijeh told AI Council 2026 that AI agents are expanding the software supply chain attack surface by selecting dependencies, connecting to MCP servers, installing s…
Xaidr, a new open-source Python library, provides in-process runtime security and governance for AI agents, detecting prompt injection, jailbreaks, destructive tool calls, secret leakage, and protocol…
Echo, in partnership with NanoClaw, eliminated 1,400 CVEs from NanoClaw's container images by using vulnerability scanners, upgrading safe libraries, backporting patches, and replacing the base OS wit…
Researchers Yossi Weizman of Microsoft and Mor Weinberger of Echo presented at Black Hat USA 2026 a new open-source tool, 'GitHub Threat Detector,' that uses GitHub's own event stream to detect supply…
Argus, an open-source security scanner that orchestrates 20+ industry-standard tools including Semgrep, Trivy, Gitleaks, tfsec, Checkov, and OWASP ZAP behind a single command and an MCP server, is now…
DockSec, an OWASP Incubator Project, launches to bridge the gap between vulnerability detection and remediation in Docker containers by orchestrating Trivy, Grype, and Docker Scout scanners with an LL…
On March 24, 2026, attackers compromised LiteLLM's CI/CD pipeline and uploaded malicious PyPI packages that stole credentials from environments with three million daily downloads. The incident highlig…
A security researcher warns that AI-generated Go code often pulls outdated, vulnerable dependencies from training data, exposing projects to real CVEs. The fix is Trivy, an open-source scanner that id…
A developer built a Docker MCP server with 50 tools after finding 11 existing packages fragmented across different licenses and feature sets. The server, which has achieved over 3,042 weekly downloads…
Last week saw active exploitation of a Check Point VPN zero-day vulnerability and attacks on Oracle PeopleSoft servers. Additionally, the open-source AI-powered Docker security scanner DockSec was rel…
A developer transformed a simple web app called SystemCraft into a production-style platform by adopting Docker, Kubernetes, Helm, ArgoCD, Prometheus, and security scanning with Trivy. The project evo…
Vens Labs has released vens-action, a GitHub Action that reranks Trivy and Grype CVE scan results by actual business risk rather than generic CVSS scores. The tool reads scan output alongside a YAML c…
According to the article, a security audit of 6,444 public Docker Compose files found that approximately 90% of them are missing three basic security flags: `read_only: true`, `cap_drop: [ALL]`, and `…
Checkmarx, a security firm, has suffered multiple supply-chain attacks over the past 40 days, including two separate malware distribution incidents via its compromised GitHub account and a subsequent …