Widely used Trivy scanner compromised in ongoing supply-chain attack

A cluster of active, high-impact security incidents: the widely used Trivy container scanner was compromised in a supply‑chain attack (risking secret theft and backdoors), and multiple other supply‑chain/backdoor incidents were reported (Notepad++ updater compromise, malicious dYdX packages, invisible‑Unicode supply‑chain tricks). Researchers also disclosed high‑risk vulnerabilities and active exploits across many platforms — a new iPhone exploit family (“DarkSword”) observed in the wild, three iOS flaws added to CISA’s KEV, IP‑KVM vulnerabilities giving BIOS‑level access, ~14,000 infected/rob