On March 24, 2026, attackers compromised LiteLLM's CI/CD pipeline and uploaded malicious PyPI packages that stole credentials from environments with three million daily downloads. The incident highlig…
A security researcher warns that AI-generated Go code often pulls outdated, vulnerable dependencies from training data, exposing projects to real CVEs. The fix is Trivy, an open-source scanner that id…
A developer built a Docker MCP server with 50 tools after finding 11 existing packages fragmented across different licenses and feature sets. The server, which has achieved over 3,042 weekly downloads…
Last week saw active exploitation of a Check Point VPN zero-day vulnerability and attacks on Oracle PeopleSoft servers. Additionally, the open-source AI-powered Docker security scanner DockSec was rel…
A developer transformed a simple web app called SystemCraft into a production-style platform by adopting Docker, Kubernetes, Helm, ArgoCD, Prometheus, and security scanning with Trivy. The project evo…
Vens Labs has released vens-action, a GitHub Action that reranks Trivy and Grype CVE scan results by actual business risk rather than generic CVSS scores. The tool reads scan output alongside a YAML c…
According to the article, a security audit of 6,444 public Docker Compose files found that approximately 90% of them are missing three basic security flags: `read_only: true`, `cap_drop: [ALL]`, and `…
Checkmarx, a security firm, has suffered multiple supply-chain attacks over the past 40 days, including two separate malware distribution incidents via its compromised GitHub account and a subsequent …