Malicious KICS Docker tags and VS Code versions 1.17.0, 1.19.0 enabled data exfiltration, risking exposed infrastructure ...
Checkmarx suffers a second supply chain attack in a month, resulting in hackers injecting credential-stealing malware into ...
Bitwarden CLI 2026.4.0 was compromised via GitHub Actions in Checkmarx campaign, exposing secrets and distributing malicious ...
Hard on the heels of a broad supply chain attack that impacted the Aqua Security-maintained Trivy open source security-scanner project, Checkmarx on Tuesday disclosed that attackers had compromised a ...
PARAMUS, N.J.--(BUSINESS WIRE)--As open source software grows to represent an ever-increasing percentage of enterprise application code, application security (AppSec) leaders and developers are ...
PARAMUS, N.J.--(BUSINESS WIRE)--With the vast majority of development teams using open source software and employing agile development, Checkmarx, the industry leader in cloud-native application ...
The compromise of a version of Bitwarden's CLI is connected to the ongoing Checkmarx supply chain campaign, but differences in the operational methods of both incidents are making it difficult to ...