Skip to content
Sign in
Artwork for Cybersecurity Under Pressure. Real Attacks, Real Lessons
Cybersecurity Under Pressure. Real Attacks, Real Lessons · April 6 · 42 min

Security Scanner Supply Chains: The Trivy and CERT-EU Case

A trusted security scanner can become part of a software supply-chain attack. Explore the Trivy and CERT-EU case through tool provenance and exposure beyond the scanning function. The episode examines controls intended to limit the impact of a compromised dependency. Related CUP episodes: OpenPLC Supply Chain Security: When Compilation Builds the Attack AI Sandbox Security: The OpenAI–Hugging Face Trust Boundary NIST IR 8536: Verifying the Software Supply Chain Kudankulam Supply Chain Breach: Protecting Engineering Information Railway AI Supply Chains: Managing Subcontractor Data Leaks Stadler Rail Extortion: Securing Supplier Data Exchanges Automotive Extortion: Protecting Cloud, APIs and the Update Chain Windchill Security: Restoring Trust in Engineering Data

0:00-42:34
Play in

transcript

No transcript — this publisher did not publish one.

show notes

A trusted security scanner can become part of a software supply-chain attack. Explore the Trivy and CERT-EU case through tool provenance and exposure beyond the scanning function. The episode examines controls intended to limit the impact of a compromised dependency.

Related CUP episodes:

  1. OpenPLC Supply Chain Security: When Compilation Builds the Attack
  2. AI Sandbox Security: The OpenAI–Hugging Face Trust Boundary
  3. NIST IR 8536: Verifying the Software Supply Chain
  4. Kudankulam Supply Chain Breach: Protecting Engineering Information
  5. Railway AI Supply Chains: Managing Subcontractor Data Leaks
  6. Stadler Rail Extortion: Securing Supplier Data Exchanges
  7. Automotive Extortion: Protecting Cloud, APIs and the Update Chain
  8. Windchill Security: Restoring Trust in Engineering Data
links8

more episodes

All episodes