Why a recent supply-chain attack singled out security firms Checkmarx and Bitwarden
AI 摘要
这条新闻显示「Why a recent supply-chain attack singled out security firms Checkmarx and Bitwarden」正在成为 科技产业 方向的新信号，值得结合 北美洲 与 科技 后续动态继续观察。
关键点
- 核心事件：Why a recent supply-chain attack singled out security firms Checkmarx and Bitwarden
- 所属领域：科技 / 科技产业
- 观察维度：北美洲、Ars Technica 后续报道与同类事件是否继续增加
影响分析
短期可能影响产品路线、开发者生态与产业链预期；若同类新闻继续增加，可能形成新的科技主题。
情绪：中性偏积极 · 相关：Ars Technica / 科技 / 北美洲 / 科技产业 · 模板回退
It has been a bad six weeks for security firm Checmarx. Over the past 40 days, it has been the victim of at least one supply-chain attack that delivered malware to customers on two separate occasions. Now it has been hit by a ransomware attack from prolific fame-seeking hackers. The streak of misfortunes started on March 19, with the supply-chain attack of Trivy, a widely used vulnerability scanner. The attackers behind the breach first breached the Trivy GitHub account and then used their access to push malware to Trivy users, one of which was Checkmarx. The pushed malware scoured infected machines for repository tokens, SSH keys, and other credentials. Both a target and delivery mechanism Four days later, Checkmarx’s GitHub account was compromised and began pushing malware to the security firm’s users. The company contained and remediated the breach and replaced the malware with the legitimate apps. Or so Checkmarx thought.Read full article Comments