TRELLIX DISCLOSES DATA BREACH FROM SOURCE CODE HACK

Trellix confirmed that attackers compromised its source code repository, gaining access to an unspecified amount of proprietary code. The company did not immediately disclose how many customers or systems were affected. The breach underscores vulnerabilities in software supply chain security, a persistent concern across the tech industry. Previous incidents at major software firms have demonstrated how compromised source code can pose risks to downstream users. Trellix, formed from the merger of McAfee's enterprise division and FireEye in 2021, specializes in cybersecurity solutions. The company said it is coordinating with law enforcement and conducting a full investigation. Details remain limited on the attack vector, timeline, and whether customer data was accessed. Trellix has not announced mandatory password resets or other immediate remediation steps for affected parties. The incident follows a broader pattern of attackers targeting software repositories to access proprietary information and potentially insert malicious code into applications.