Cybersecurity · 42 views
Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain
Malicious KICS Docker tags and VS Code versions 1.17.0, 1.19.0 enabled data exfiltration, risking exposed infrastructure secrets.
Summary
Cybersecurity researchers have warned of malicious images pushed to the official "checkmarx/kics" Docker Hub repository. In an alert published today, software supply chain security company Socket revealed that unknown threat actors managed to have overwritten existing tags, including v2.1.20 and alpine, while also introducing a new v2.1.21 tag that does not correspond to an official release.
AI summaries can be wrong sometimes—always verify important details using the source article.
How AI & Automation are usedCoverage Context
More from Cybersecurity
Continue reading recent Cybersecurity coverage
- October Patch Tuesday roundup: Over 1,400 Microsoft holes to be plugged, including three zero daysContinue reading
- Microsoft Patches More Than 1,400 Security FlawsContinue reading
- Employee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Company SayContinue reading
- OpenAI engineer arrested for allegedly planting spy device in officeContinue reading
Support HappeningNow
Independent AI-powered news analysis is reader-supported. Your contribution helps cover infrastructure, summaries, and continued platform development.
Support HappeningNow