aritas
SolarpapstKlimakleber vs. Bauernterroristen
aritas
- 51 Followers
- 195 Following
- 9 Posts
Dev, Sec & Ops
abadideaif you have avoided updating an iOS device because of some combination of hating the new UI or age verification nonsense, please be aware that a critical security patch has been back-ported to iOS 18 so you can install just the patch without a full upgrade. SCROLL DOWN on the Updates tab to find it, if it’s available to you.
RE: https://mastodon.social/@anon_opin/116283546413716669
guilty as charged
Felix DreissigTrivy has been compromised again and this time, the impact is far more wide-reaching.
After the GitHub token stealing a few weeks back, (presumably the same) actors yesterday published malicious binaries and CI actions.
If you‘re using Trivy without version pinning (especially in pipelines), assume you‘re affected.
https://www.stepsecurity.io/blog/trivy-compromised-a-second-time---malicious-v0-69-4-release
Trivy Compromised a Second Time - Malicious v0.69.4 Release, aquasecurity/setup-trivy, aquasecurity/trivy-action GitHub Actions Compromised - StepSecurity
On March 19, 2026, trivy — a widely used open source vulnerability scanner maintained by Aqua Security — experienced a second security incident. Three weeks after the hackerbot-claw incident on February 28 that resulted in a repository takeover, a new compromised release (v0.69.4) was published to the trivy repository. The original incident disclosure discussion (#10265) was also deleted during this period, and version tags on the aquasecurity/setup-trivy GitHub Action were removed. Trivy maintainers deleted the v0.69.4 tag and Homebrew downgraded to v0.69.3. The following is a factual account of what we observed through public GitHub data.
Aljoscha Rittner (beandev)Noch mal ganz klar: Es wird keine neuen AKW geben. Das ist eine Agenda der Fossillobby, um von Erneuerbaren abzulenken, ewige Planungsphasen zu etablieren und parallel weiter fossile Energie zu liefern. Jede Verzögerung bei den erneuerbaren Energien, ist ein Plus in den Kassen.
Scheißegal, ob da ein paar Millionen in AKW Planungen versenkt werden (sind ja sowieso Steuergelder). In der Zwischenzeit werden weiter Milliarden verdient.
Das ist Lobbypolitik und unsere Politik ist korrumpiert.
Mehr gibt es nicht zu verstehen.