#Checkmarx

From The Register: Checkmarx tackles another TeamPCP intrusion as Jenkins plugin sabotaged

From Ars Technica: Why a recent supply-chain attack singled out security firms Checkmarx and Bitwarden

Checkmarx confirmed a data leak on the dark web after threat actors exploited a supply chain vulnerability in the Trivy scanner to compromise GitHub repositories and development workflows.…

From The Register: Ongoing supply-chain attack 'explicitly targeting' security, dev tools

Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.