Checkmarx on Security Unlockedhttps://securityunlocked.com/tags/checkmarx/Recent content in Checkmarx on Security UnlockedHugoen-usTue, 28 Apr 2026 17:00:00 +0000When the Security Tool IS the Supply Chain Attackhttps://securityunlocked.com/alerts/when-the-security-tool-is-the-supply-chain-attack/Tue, 28 Apr 2026 17:00:00 +0000https://securityunlocked.com/alerts/when-the-security-tool-is-the-supply-chain-attack/TeamPCP’s supply-chain campaign has propagated from Trivy to Checkmarx KICS, Checkmarx GitHub Actions, two Open VSX plugins, and now Bitwarden CLI. Lapsus$ is handling the extortion. The blast radius now reaches a password manager with 10M+ users.