Top Five Compliance Audit Software and Tools: Mastering Modern Regulatory Risk

Executive Summary Manual audit preparation no longer scales across hybrid, cloud, endpoint, and application environments. Compliance monitoring software must move from checklist validation to continuous control monitoring. The strongest platforms connect evidence collection with risk...

checkov v3.3.8

Checkov is a static code analysis tool for infrastructure as code IaC and also a software composition analysis SCA tool for images and open source packages. It scans cloud infrastructure provisioned using Terraform, Terraform plan, Cloudformation, AWS SAM, Kubernetes, Helm charts, Kustomize,...

PT-2026-6006

An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov...

EUVD-2021-26387

Malware in sbrugna...

EUVD-2021-26385

Malware in sbrugna...

EUVD-2021-26391

Malware in sbrugna...

EUVD-2021-26395

Malware in sbrugna...

EUVD-2021-26392

Malware in sbrugna...

EUVD-2024-47038

Malicious code in bioql PyPI...

EUVD-2025-24606

Malicious code in bioql PyPI...

EUVD-2025-24618

Malicious code in bioql PyPI...

EUVD-2025-14901

Malicious code in bioql PyPI...

The vulnerability of the Terraform file processor tool for static code analysis by Prisma Cloud allows a attacker to execute arbitrary code.

The vulnerability of the Terraform file processor tool for static code analysis by Prisma Cloud is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2025-2181

A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output...

CVE-2025-2180

An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue impacts Checkov 3.0 versions earlier th...

CVE-2025-2181

A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output...

CVE-2025-2180

An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue impacts Checkov 3.0 versions earlier th...

CVE-2025-2181 Checkov by Prisma Cloud: Cleartext Exposure of Credentials

A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output...

CVE-2025-2181

CVE-2025-2181 affects Palo Alto Networks Checkov by Prisma Cloud. The vulnerability is a sensitive information disclosure that can cause Prisma Cloud access keys to be exposed in Checkov’s output (cleartext). Multiple sources corroborate exposure of credentials via Checkov output during operation...

CVE-2025-2181 Checkov by Prisma Cloud: Cleartext Exposure of Credentials

A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output...