Jenkins RCE Vulnerability (CVE-2026-33001) - Patch to 2.555 Now
The Jenkins project released a security advisory on March 18, 2026, addressing three vulnerabilities - two rated High and one Medium. The most critical, CVE-2026-33001, …
← All Posts
Security
How Trivy Was Compromised to Deliver Malware (Again)
On March 19, 2026, Trivy - the most widely used open-source vulnerability scanner in DevSecOps pipelines - had its release process compromised for the second …
When Trivy’s CI Turned Against It - The Incident, Impact
Trivy Got Hacked: What Actually Happened?