cybersecurity ransomware supply chain attack Checkmarx GitHub breach

Security firm Checkmarx has endured a relentless six-week streak of cyberattacks, including two supply-chain incidents and a recent ransomware strike. The attacks, which exploited compromised GitHub accounts, targeted both Checkmarx and its customers.

Timeline of the Attacks

The first incident occurred on March 19, 2024, when attackers breached the GitHub account of Trivy, a widely used vulnerability scanner. The hackers then pushed malware to Trivy users, including Checkmarx. The malware was designed to harvest repository tokens, SSH keys, and other sensitive credentials from infected machines.

Four days later, on March 23, 2024, Checkmarx’s own GitHub account was compromised. The attackers used this access to push malware to the security firm’s users. Checkmarx claims to have contained and remediated the breach, replacing the malicious files with legitimate applications.

Ransomware Strike Follows Supply-Chain Attacks

Now, Checkmarx has been hit by a ransomware attack attributed to a prolific hacking group seeking notoriety. The timing of this attack has raised concerns about the firm’s security posture and the effectiveness of its remediation efforts.

Impact on Customers

The supply-chain attacks exposed Checkmarx’s customers to significant risks, including credential theft and potential unauthorized access to sensitive data. While Checkmarx has stated that it contained the breaches, the incidents highlight the growing threat of supply-chain attacks targeting security firms.

Source: Ars Technica
Oliver Ellsworth, Third Chief Justice of the U.S. Supreme Court, Born on April 29, 1745
← Previous

Oliver Ellsworth, Third Chief Justice of the U.S. Supreme Court, Born...

 Why Political Violence in the U.S. Is a Growing Threat to Democracy
Next →

Why Political Violence in the U.S. Is a Growing Threat to Democracy