#devsecops

Vulnerabilities & CVEs

Checkmarx Jenkins Plugin Hijacked [Infostealer Attack]

Just when you thought CI/CD pipelines were safe, Checkmarx’s Jenkins plugin gets roped into a supply-chain attack. TeamPCP strikes again.

Security Tools

Security Detections: From Chaos to Code [Rapid7's Approach]

For years, software development has had discipline. Security detection? Not so much. Rapid7 is trying to fix that with 'Detection as Code,' a move that’s long overdue.

Compliance & Policy

Axios npm Poisoning: Hackers Hijack Your Dev Secrets via 100M Downloads

One npm install, and boom—your cloud keys are en route to a hacker's server. Axios, the unsung hero of JS networking, just got turned into a trojan horse.