[2026] Checkmarx KICS Supply-Chain Hack Steals Secrets in 84 Minutes
In a blistering 84-minute window on April 22, 2026, attackers turned Checkmarx's KICS tool against its users, siphoning secrets from Docker pulls and VSCode extensions. This isn't just another breach—it's a blueprint for how supply-chain attacks are evolving.
⚡ Key Takeaways
- Attack lasted 84 minutes via repointed Docker tags, stealing precise dev secrets through KICS. 𝕏
- VSCode extensions hid 'MCP addon' pulling multi-stage malware—hardcoded GitHub URLs were key vuln. 𝕏
- Rotate creds if you pulled during window; pin SHAs to prevent repeats. 𝕏
- Echoes SolarWinds but faster, dev-tool focused—expect attestation mandates by 2027. 𝕏
Worth sharing?
Get the best Cybersecurity stories of the week in your inbox — no noise, no spam.
Originally reported by Bleeping Computer
Related Stories
Data Breaches
[2026] Bitwarden CLI npm Compromised in Supply Chain Attack
Nation-State Threats
North Korea Poisons Axios NPM Package: Millions at Risk in Bold Supply Chain Hit
Ransomware & Malware
[2026] SentinelOne's AI EDR Blocks CPU-Z Watering Hole Attack
Ransomware & Malware