kube-bench

kube-bench is a tool that checks whether Kubernetes is deployed securely by running the checks documented in the CIS Kubernetes Benchmark. Tests are configured with YAML files, making this tool easy to update as test specifications evolve. CIS Scanning as part of Trivy and the Trivy Operator Triv...

trivy-operator

Kubernetes 네이티브 보안 툴킷. 문서 소개 Trivy Operator는 Trivy를 활용하여 Kubernetes 클러스터의 보안 문제를 지속적으로 스캔합니다. 스캔 결과는 Kubernetes Custom Resource Definitions 형태의 보안 보고서로 요약되며, Kubernetes API를 통해 접근할 수 있습니다. Operator는 Kubernetes의 상태 변경을 감시하고 이에 대응하여 보안 스캔을 자동으로 트리거하는 방식으로 동작합니다. 예를 들어, 새로운 Pod가 생성되면 취약점 스캔이 시작됩니다. ...

tfsec

📣 tfsecからTrivyへの移行 私たちは、すべてのユーザーに包括的なオープンソースのセキュリティソリューションを提供するという目標の一環として、スキャン関連の取り組みを1か所に集約してきました。それがTrivyです。 過去1年間で、tfsecはTrivyのIaCおよび設定ミススキャン機能（Terraformスキャンを含む）の基盤を築いてきました。Terraformスキャンは、すでに長期間にわたってTrivyでネイティブサポートされています。...

teampcp-supply-chain-attack

TeamPCP サプライチェーン攻撃: 技術分析と検出ガイド CVE-2026-33634 CVSS 9.4 — 2026年でこれまでに最も影響力の大きいCI/CDサプライチェーン攻撃。 2026年3月19日から25日にかけて、脅威アクター TeamPCP 別名: DeadCatx3、PCPcat、ShellForce、CanisterWorm は、GitHub Actions、Docker Hub、OpenVSX、npm、PyPI の5つのエコシステムにまたがる連鎖的なサプライチェーン侵害を実行しました。ローテーションが不完全だった単一のGitHub...

cloudsploit

Aqua의 CloudSploit - 클라우드 보안 스캔 빠른 시작 일반 $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker build . -t cloudsploit:0.0.1 $ docker run cloudsploit:0.0...

vuln-list-aqua

vuln-list-aqua Aqua Security のセキュリティアドバイザリ...

trivy-plugin-aqua

trivy-plugin-aqua Aqua Security SaaS プラットフォームと統合するための Trivy プラグイン 使用方法 Trivy のオプションは -- の後に渡す必要があります。Trivy は IaC ファイルを含むターゲットディレクトリを受け取ります。 環境変数をエクスポートして、Aqua プラグインを Trivy の現在のデフォルトプラグインとして設定します。 export TRIVYRUNASPLUGIN=aqua IaC ターゲットをスキャンする trivy IaC ターゲットをスキャンしてタグを付ける trivy IaC...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-33634link is external Aqua Security Trivy Embedded Malicious Code Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber...

Guidance for detecting, investigating, and defending against the Trivy supply chain compromise

In this article 1. Analyzing the Trivy supply chain compromise 2. Detection and investigation 3. Mitigation and protection guidance 4. Advanced hunting queries 5. References 6. Learn more On March 19, 2026, Trivy, Aqua Security’s widely used open-source vulnerability scanner, was reported to have...

‘CanisterWorm’ Springs Wiper Attack Targeting Iran

A financially motivated data theft and extortion group is attempting to inject itself into the Iran war, unleashing a worm that spreads through poorly secured cloud services and wipes data on infected systems that use Iran's time zone or have Farsi set as the default language. Experts say the wip...

Trivy Hack Spreads Infostealer via Docker, Triggers Worm and Kubernetes Wiper

Cybersecurity researchers have uncovered malicious artifacts distributed via Docker Hub following the Trivy supply chain attack, highlighting the widening blast radius across developer environments. The last known clean release of Trivy on Docker Hub is 0.69.3. The malicious versions 0.69.4,...

Aqua Security多款产品 安全漏洞

Aqua Security Trivy and Trivy Action are both products of Aqua Security. Trivy is a comprehensive and multifunctional security scanner. Trivy Action is a container vulnerability scanning software. Several products from Aqua Security have security vulnerabilities, which stem from supply chain...

Trivy Compromised: Everything You Need to Know about the Latest Supply Chain Attack

On March 19, 2026, threat actors injected credential-stealing malware into Aqua Security’s Trivy scanner and related GitHub Actions. Learn how "TeamPCP" executed this breach and how to audit your environment...

EUVD-2022-2199

Malicious code in bioql PyPI...

EUVD-2022-2512

Malicious code in bioql PyPI...

CVE-2025-53653

Jenkins Aqua Security Scanner Plugin 3.2.8 and earlier stores Scanner Tokens for Aqua API unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

The vulnerability of the Aqua Security Scanner plugin in the Jenkins automation server, related to the lack of data encryption measures, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Aqua Security Scanner plugin in the Jenkins automation server is related to the lack of data encryption measures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

GHSA-3WGG-3J4J-3F69 Jenkins Aqua Security Scanner Plugin vulnerability exposes scanner tokens

Jenkins Aqua Security Scanner Plugin 3.2.8 and earlier stores Scanner Tokens for Aqua API unencrypted in job config.xml files on the Jenkins controller as part of its configuration. These tokens can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file...

Cleartext Storage of Sensitive Information

Overview org.jenkins-ci.plugins:aqua-security-scanner is a Jenkins plugin for calling the Aqua API to scan a Docker image Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information in the storage of Scanner Tokens for Aqua API in config.xml files on the...

CVE-2025-53653

Jenkins Aqua Security Scanner Plugin 3.2.8 and earlier stores Scanner Tokens for Aqua API unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...