Guidance for detecting, investigating, and defending against the Trivy supply chain compromise

Microsoft Security Blog posts covering a high-impact Trivy supply‑chain compromise in which threat actors abused trusted Trivy distribution channels to inject credential‑stealing malware into CI/CD pipelines worldwide, with step‑by‑step detection, investigation, and defense guidance. The feed also includes related high‑value guidance and case studies: a Defender case study where predictive shielding blocked GPO‑based ransomware, an investigation of a Microsoft Teams voice‑phishing compromise, tax‑season phishing guidance, new AI security materials (Zero Trust for AI, governing agent intent, CT