CHECKMARX KICS TOOL COMPROMISED IN SUPPLY-CHAIN ATTACK
■ AI-SUMMARIZED FROM 1 SOURCE BELOW
Hackers have compromised multiple distribution channels for Checkmarx's KICS analysis tool, including Docker images and code editor extensions, to extract sensitive data from developer environments.
■ MORE FROM THE SECURITY DESK
Apple has patched a vulnerability that retained Signal message data even after users deleted the app, potentially allowing law enforcement to access private communications. Signal confirmed the fix resolves the security issue.
Half a million confidential health records from UK Biobank participants were advertised for sale on Chinese e-commerce site Alibaba last week. The UK government has confirmed the listings and says the data has been removed with no evidence of sales.
The Trump administration says it has evidence of large-scale industrial distillation campaigns by Chinese actors targeting American AI models. The government is now moving to counter the threat.
Attackers compromised Bitwarden's command-line interface as part of an ongoing campaign targeting Checkmarx users. The malicious code was injected into the package repository, affecting developers using the tool.