European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack

Multiple high-impact incidents and vulnerabilities were reported: the European Commission confirmed a supply-chain–linked data breach tied to Trivy that exposed over 300 GB of data in its AWS environment; a TrueConf zero-day was exploited by a Chinese actor against Asian government targets for reconnaissance, privilege escalation and payload deployment; critical ShareFile vulnerabilities can be chained to achieve unauthenticated RCE and arbitrary file upload; React2Shell was abused in a large credential-harvesting campaign compromising 750+ systems; North Korean actors drained $285M from Drift