Trellix Says Part of Its Source Code Repository Was Breached
Summary
Trellix says part of its source code repository was breached. It is investigating with forensic experts and has notified law enforcement; it says it has found no evidence that its release process was affected or source code exploited.
Key points
- Trellix says part of its source code repository was breached, but has shared few details.
- The company is investigating with forensic experts and has notified law enforcement.
- Trellix says its investigation has found no evidence that its source code release or distribution process was affected, or that its source code was exploited.
- The article says the incident may be related to a broader software supply-chain campaign, but presents this connection as speculation based on timing.
- The campaign is linked in the article to TeamPCP and Lapsus$ and is said to have affected Checkmarx, Aqua Security, and Bitwarden.
Article Details
- Victim Organization
- Trellix
- Incident Type
- Breach of part of Trellix's source code repository
- Operational Impact
- Trellix said it found no evidence that its source code release or distribution process was affected, or that its source code had been exploited. The investigation is ongoing.
- Claim Status
- confirmed
Threat Actors
LAPSUS$Described as linked to the broader supply chain campaign. The article says Trellix's breach may be related to that campaign, but does not confirm Lapsus$'s involvement in this incident.TeamPCPDescribed as linked to the broader supply chain campaign. The article says Trellix's breach may be related to that campaign, but does not confirm TeamPCP's involvement in this incident.