Aetherial Blog
Insights on Cloud Security, Identity, and Automation.
When the Scanner Becomes the Weapon: NHI Lessons from the Trivy / TeamPCP Supply Chain Attack
On March 19, 2026, attackers compromised Aqua Security's Trivy scanner by targeting its non-human identities - not a single human password was phished. Here's what every security team must learn from TeamPCP.
The Dangers of NHI & the OWASP NHI Top 10
Why service accounts and API keys are the new perimeter for cloud security.
