Ongoing supply-chain attack 'explicitly targeting' security, dev tools
· Source: theregister.com
In short
Checkmarx, a software security testing firm, has become the latest victim of an ongoing supply-chain attack targeting security tool providers. The Lapsus$ extortion group claims to have dumped source code, API keys, and other sensitive data from Checkmarx's GitHub repository, with the breach linked to a March 23 attack that poisoned open source tools like Trivy, KICS, and Bitwarden's CLI. Attackers are deliberately compromising trusted developer tools to gain access to downstream environments, credentials, and infrastructure.
Read Original Article — Read the full article on the publisher’s site.
In the issue of week 18, 2026: Agentic AI and Physical Automation Drive Supply Chain Breakthroughs
Tags: supply-chain, security, cyberattack, checkmarx, open-source, dev-tools