Trivy supply-chain compromise and NPM worm

Russian intelligence services compromised thousands of Signal accounts, the Trivy vulnerability scanner is abused in a supply chain attack, Oracle issues an out-of-band patch for its Fusion Middleware, and the FBI takes down the Aisuru and Kimwolf botnets.

Show notes

• Risky Bulletin: GitHub is starting to have a real malware problem