Two LiteLLM releases, 1.82.7 and 1.82.8, were published to PyPI with a credential stealer inside after attackers tracked as TeamPCP stole a PyPI publishing token via a compromised Trivy GitHub Action,…
A developer behind Aqiron Security, an open-source application security project, separated the product's security and runtime logic from its VS Code extension into a standalone Node.js and TypeScript …
Developer alegrey91 released vex8s, an experimental open-source tool that generates VEX (Vulnerability Exploitability eXchange) documents by correlating container vulnerabilities with Kubernetes secur…
A developer moved six self-hosted services from Docker Compose to a K3s Kubernetes cluster using ArgoCD, Kyverno admission policy, Trivy image scanning, and SealedSecrets, then reversed the migration …
A developer migrated seven self-hosted services to Kubernetes using K3s, ArgoCD, Kyverno, Trivy, and SealedSecrets, then reversed all seven back to Docker Compose in a single afternoon. The reversal w…
A developer has detailed an open-source, cloud-agnostic continuous threat exposure management (CTEM) program that mirrors an attacker's reconnaissance to identify and remediate exposures before they b…
OpsCart Labs released an open-source Docker security practical guide with 13 hands-on labs covering CIS-aligned auditing, container hardening, vulnerability management, image trust, seccomp, network s…
In March 2026, threat actor group TeamPCP published two backdoored versions of LiteLLM (1.82.7 and 1.82.8) to PyPI, live for roughly six hours, compromising more than 2,500 organizations and 434,000 C…
On March 24, 2026, malicious versions of the LiteLLM library (1.82.7 and 1.82.8) were hosted on the Python Package Index (PyPI) for approximately 40 minutes by threat actor Team PCP, exfiltrating 78,3…
A new guide outlines five practical steps to secure software supply chains, including sandboxing AI agents with Docker Sandboxes, freezing dependencies with a five-day cooldown, using hardened multi-s…
Docker AI Governance now streams every policy decision into the SIEM that security teams already use, providing a searchable record in Docker Cloud. The update follows a year in which supply-chain att…
Socket founder and CEO Feross Aboukhadijeh told AI Council 2026 that AI agents are expanding the software supply chain attack surface by selecting dependencies, connecting to MCP servers, installing s…
Xaidr, a new open-source Python library, provides in-process runtime security and governance for AI agents, detecting prompt injection, jailbreaks, destructive tool calls, secret leakage, and protocol…
Echo, in partnership with NanoClaw, eliminated 1,400 CVEs from NanoClaw's container images by using vulnerability scanners, upgrading safe libraries, backporting patches, and replacing the base OS wit…
Researchers Yossi Weizman of Microsoft and Mor Weinberger of Echo presented at Black Hat USA 2026 a new open-source tool, 'GitHub Threat Detector,' that uses GitHub's own event stream to detect supply…
Argus, an open-source security scanner that orchestrates 20+ industry-standard tools including Semgrep, Trivy, Gitleaks, tfsec, Checkov, and OWASP ZAP behind a single command and an MCP server, is now…
DockSec, an OWASP Incubator Project, launches to bridge the gap between vulnerability detection and remediation in Docker containers by orchestrating Trivy, Grype, and Docker Scout scanners with an LL…
On March 24, 2026, attackers compromised LiteLLM's CI/CD pipeline and uploaded malicious PyPI packages that stole credentials from environments with three million daily downloads. The incident highlig…
A security researcher warns that AI-generated Go code often pulls outdated, vulnerable dependencies from training data, exposing projects to real CVEs. The fix is Trivy, an open-source scanner that id…
A developer built a Docker MCP server with 50 tools after finding 11 existing packages fragmented across different licenses and feature sets. The server, which has achieved over 3,042 weekly downloads…