Attackers Are Still Coming for Security Companies. Here's Where We Stand.

The TeamPCP supply chain campaign that began with Trivy in March has now reached Checkmarx’s Docker images, VS Code extensions, and Bitwarden CLI. This post explains what happened, what we did, and what any security team can do right now.