Make zero CVEs your new default

What happened

Supply-chain attacks have stopped being isolated incidents somewhere in the past year. The compromises now reach the tools the industry trusts to defend itself, with Trivy and KICS among this year’s targets . Mark Lechner, Docker’s Chief Information Security Officer, called the latest wave ‘a permanent shift in the threat landscape’ , and the months since have borne that out. The volume is growing at the same time.…

Summary assembled by rule from the sources below

Sources