The post Checkmarx Falls Victim to Credential Harvesting Attack appeared first on Daily CyberSecurity. Related posts: Suspected North Korean Actors Target the Cryptocurrency Supply Chain The Dark Side of Telegram: How Cybercriminals Weaponize Bot APIs for Stealthy Data Exfiltration The Weakest Link: How “Transit Hubs” are Quietly Draining Crypto and Stealing AI Data

The post TeamPCP Hijacks Checkmarx in Sprawling Supply Chain Strike appeared first on Daily CyberSecurity. Related posts: Malicious VeloraDEX SDK Compromises Developer Machines via npm The Mutable Tag Trap: Critical 9.4 CVSS Attack on Xygeni GitHub Action Exposes CI/CD Pipelines Checkmarx Alert: Malicious Plugins and GitHub Actions Hit OpenVSX in New Supply Chain Attack

Hackers compromised Trivy, Checkmarx, and LiteLLM in a supply chain attack, stealing cloud credentials, tokens, and crypto wallet data from developers.