How Attackers Turned Trivy Into a Weapon Against Cisco

Cisco DevHub, ShinyHunters, and the Artifact Store Problem This is not a supply chain attack on Trivy. Trivy's code was not compromised. Its release pipeline was not tampered with. Its distribution chain was not poisoned. The attack class is artifact store misconfiguration - an access control fail