Cybersecurity · 46 views
TeamPCP Compromises Checkmarx Jenkins AST Plugin Weeks After KICS Supply Chain Attack
TeamPCP compromised a Checkmarx Jenkins plugin in 2026, exposing supply chain security gaps and credential risks.
AI Summary
Checkmarx confirmed that a modified version of its Jenkins AST plugin had been published to the Jenkins Marketplace. The company urged users of the Checkmarx Jenkins AST plugin to verify they are running the version 2.0.13‑829.vc72453fa_1c16, which was released on December 17, 2025, or an earlier version. The statement was issued over the weekend following the discovery of the compromised plugin.
AI summaries can be wrong sometimes—always verify important details using the source article.
How AI & Automation are usedCoverage Context
More from Cybersecurity
Continue reading recent Cybersecurity coverage
- Employee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Company SayContinue reading
- OpenAI engineer arrested for allegedly planting spy device in officeContinue reading
- Zero-Days Lurk in Microsoft's Overgrown October Patch TuesdayContinue reading
- Ghostscript flaw lets hackers hijack servers via PDF uploadsContinue reading
Support HappeningNow
Independent AI-powered news analysis is reader-supported. Your contribution helps cover infrastructure, summaries, and continued platform development.
Support HappeningNow