Tracked topic
…Grafana says stolen GitHub token let hackers steal codebase TeamPCP hackers advertise Mistral AI code repos for sale Bitwarden CLI npm package compromised to steal developer credentials Checkmarx confirms LAPSUS$ hackers leaked…
…In March, the hacker group also compromised Aqua Security's Trivy vulnerability scanner , which is believed to have led to cascading compromises affecting Aqua Security Docker images and the Checkmarx KICS project…
…Video service Vimeo confirms Anodot breach exposed user data Checkmarx confirms LAPSUS$ hackers leaked its stolen GitHub data US govt seeks Instructure testimony on massive Canvas cyberattack Instructure reaches 'agreement' with ShinyHunters…
…same crew injected the same malware into open source static analysis tool KICS maintained by Checkmarx, and also published malicious versions of LiteLLM and Telnyx to the Python Package Index (PyPI). After…
…OptinMonster WordPress plugin hacked in CDN supply-chain attack WP Maps Pro bug exploited to create admin accounts on WordPress sites Avada Builder WordPress plugin flaws allow site credential theft Official CheckMarx…
…More recent supply-chain attacks have hit Trivy, Checkmarx, and Bitwarden and more than 150 packages available through open source repositories. Last year, there were at least six notable such attacks. Anyone…
…Companies need to focus on fixing exploitable vulnerabilities, not discovering as many as possible, says Checkmarx CEO 3 Sony and Microsoft are destroying console and PC gaming — here’s why the experts…
…just the most recent in a string of supply chain attacks that TeamPCP has carried out to spread its infostealer malware, including via the LiteLLM AI software and the security software CheckMarx.
…The group also tainted infrastructure from the web application security firm Checkmarx, hit the development server pgserve, and compromised the web app library TanStack as well as the enterprise AI platform Mistral…
…TeamPCP is the same threat actor responsible for compromising Aqua Security's Trivy vulnerability scanner on March 19 and Checkmarx's KICS GitHub Action on March 23. Whether this is genuinely TeamPCP…