CHECKMARX KICS TOOL COMPROMISED IN SUPPLY-CHAIN ATTACK
■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE
Hackers have compromised multiple distribution channels for Checkmarx's KICS analysis tool, including Docker images and code editor extensions, to extract sensitive data from developer environments.
■ MORE FROM THE SECURITY DESK
Australia's financial regulator has warned of a surge in investment scams using deepfake videos of Anthony Albanese and other celebrities. The Prime Minister is the most commonly exploited figure in the fraudulent schemes.
Security researchers have identified AmnesiaStealer, a new information-stealing malware targeting macOS users through ClickFix attacks. The threat includes a streaming module enabling attackers to remotely control victims' web browsers.
Fraudsters are using artificial intelligence to analyze vacation photos shared on social media, then sending targeted phishing emails claiming suspicious activity in those exact locations to steal banking credentials.
Anthropic disclosed that its internal filtering system for biological and chemical weapons risks was inactive for nearly a year, leaving 133 million unfiltered requests unmonitored.