Checkmarx warned over the weekend that a rogue version of its Jenkins Application Security Testing (AST) plugin had been ...

TeamPCP compromised a Checkmarx Jenkins plugin in 2026, exposing supply chain security gaps and credential risks.

Checkmarx warned that a malicious version of its Jenkins AST plugin was published in a software supply chain attack.

It has been a bad six weeks for security firm Checkmarx. Over the past 40 days, it has been the victim of at least one supply-chain attack that delivered malware to customers on two separate occasions ...

Google's GTIG identified the first zero-day exploit developed with AI and stopped a mass exploitation event. The report documents state actors using AI for vulnerability research and autonomous ...

An infected VS Code extension compromised around 3,800 repositories owned by GitHub. And that's something that all developers ...

The software supply chain is the new ground zero for enterprise cyber risk. Don't get caught short - SiliconANGLE ...

Binance CZ urges developers to rotate API keys following the exposure of a GitHub internal repository.

Google says attackers are using AI for zero-day research, malware development, reconnaissance, and access to premium AI tools ...

Bitwarden has confirmed a serious security incident in which a compromised product was made public. Here's why most users need not worry.

Mini Shai-Hulud hit 2 OpenAI devices via TanStack, exposing limited credentials and forcing macOS certificate updates by June ...

Build Application Firewalls (BAFs) are emerging as a new defense against software supply chain attacks by inspecting ...