Checkmarx
In 10 briefs, most recently 19 May 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Coverage in DanSec Daily
- Grafana source code theft, the ShinyHunters-linked 7-Eleven breach, and an unpatched zero-day in Microsoft Exchange under active exploitation.
- Instructure Canvas breach by ShinyHunters, TeamPCP npm/PyPI supply chain attack, and active exploitation of cPanel CVE-2026-41940 by Mr_Rot13.
- Canvas outage disrupts students during finals, a years-long phishing campaign targets 500+ organizations, and German police shut down the Crimenetwork …
- The TeamPCP SAP npm supply chain attack, Checkmarx GitHub data theft, and a five-year dormant WordPress plugin backdoor affecting 70,000+ sites.
- The Vimeo breach via Anodot, LAPSUS$ leaking Checkmarx data, and the critical GitHub RCE flaw CVE-2026-3854.
- The TeamPCP supply chain attacks on Checkmarx and Bitwarden, ShinyHunters breaches of ADT and Medtronic, and new Windows privilege escalation flaws.
- Bitwarden and Checkmarx supply chain attacks, Vercel breach, and actively exploited Microsoft Defender BlueHammer zero-day.
- Malicious checkmarx/kics Docker images, a self-propagating npm worm stealing developer tokens, and Lotus Wiper attacks on Venezuela's energy sector.
- Infinite Campus and HackerOne breaches, TeamPCP's LiteLLM PyPI supply chain attack, and malvertising abusing a Huawei driver to kill EDR.
- Jaguar Land Rover's cyberattack fallout, Sedgwick Government Solutions breach, and malicious Chrome extensions stealing ChatGPT and DeepSeek chats from 900,000 …