Summary

Checkmarx confirmed a data leak on the dark web after threat actors exploited a supply chain vulnerability in the Trivy scanner to compromise GitHub repositories and development workflows. The incident, linked to TeamPCP and LAPSUS$, resulted in the exposure of source code and internal credentials.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines