{"id":60549,"date":"2026-04-27T23:33:51","date_gmt":"2026-04-27T23:33:51","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/ongoing-supply-chain-attack-explicitly-targeting-security-dev-tools\/"},"modified":"2026-04-27T23:33:51","modified_gmt":"2026-04-27T23:33:51","slug":"ongoing-supply-chain-attack-explicitly-targeting-security-dev-tools","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/ongoing-supply-chain-attack-explicitly-targeting-security-dev-tools\/","title":{"rendered":"Ongoing supply-chain attack ‘explicitly targeting’ security, dev tools"},"content":{"rendered":"

Software security testing outfit Checkmarx has become the latest organization caught up in an ongoing attack on security-tool providers. The biz said data posted online appears to have come from one of its GitHub repositories after the Lapsus$ extortion crew claimed to have dumped the company\u2019s source code, secrets, and other sensitive data.<\/p>\n

In a Sunday update<\/a>, Checkmarx said the investigation remains ongoing, and it’s working to “verify the nature and scope” of the data. Current evidence, however, suggests that “this data originated from Checkmarx’s GitHub repository, and that access to that repository was facilitated through the initial supply chain attack of March 23, 2026.”<\/p>\n

The security shop has since locked down access to the affected repo, and said if the investigation determines any customer information was posted online, it will notify “all relevant parties immediately.”<\/p>\n