Latest / Cybersecurity Under Pressure. Real Attacks, Real Lessons
Security Scanner Supply Chains: The Trivy and CERT-EU Case
A trusted security scanner can become part of a software supply-chain attack. Explore the Trivy and CERT-EU case through tool provenance and exposure beyond the scanning function. The episode examines controls intended to limit the impact of a compromised dependency.
Related CUP episodes:
OpenPLC Supply Chain Security: When Compilation Builds the Attack
AI Sandbox Security: The OpenAI–Hugging Face Trust Boundary
NIST IR 8536: Verifying the Software Supply Chain
Kudankulam Supply Chain Breach: Protecting Engineering Information
Railway AI Supply Chains: Managing Subcontractor Data Leaks…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.