Cybersecurity firm Trellix has disclosed a data breach following unauthorized access to a portion of its source code repository. The company is investigating the extent of the breach and its potential impact.
Trellix confirmed that attackers compromised its source code repository, gaining access to an unspecified amount of proprietary code. The company did not immediately disclose how many customers or systems were affected.
The breach underscores vulnerabilities in software supply chain security, a persistent concern across the tech industry. Previous incidents at major software firms have demonstrated how compromised source code can pose risks to downstream users.
Trellix, formed from the merger of McAfee's enterprise division and FireEye in 2021, specializes in cybersecurity solutions. The company said it is coordinating with law enforcement and conducting a full investigation.
Details remain limited on the attack vector, timeline, and whether customer data was accessed. Trellix has not announced mandatory password resets or other immediate remediation steps for affected parties.
The incident follows a broader pattern of attackers targeting software repositories to access proprietary information and potentially insert malicious code into applications.
Authorities have arrested two alleged members of TeamPCP, a hacking group responsible for infecting over 1,000 organizations through supply-chain attacks.
A Georgia police officer used Flock surveillance technology to track the movements of his ex-partner and another officer after their affair ended, according to internal investigation records.
McKesson, a major healthcare and pharmaceutical distributor, confirmed a cybersecurity incident involving unauthorized access to third-party applications. Extortion group ShinyHunters claims responsibility for stealing 284 million patient data records.
Fraudsters are exploiting Microsoft Teams and similar enterprise chat apps to deceive Chinese users into sending large sums of money. The trend has sparked a wave of complaints across the region.