open-source security

April 23, 2026

Checkmarx KICS Supply-Chain Breach: What Devs Need to Know

Hackers trojanized Checkmarx KICS Docker images and VS Code extensions to steal cloud credentials, GitHub tokens, and SSH keys from developer environments.