Supply chain attacks hit Checkmarx and Bitwarden developer tools
2026-04-28T20:51:36Z•d7691afb4abcd4b8cdf4a102a3b9b03c7c6c833084fceb15757045e46bbb537f
BitwardenC2CheckmarxSophos X-Opscommand-and-controldeveloper toolspipelinesoftware supply chainsupply chainsupply-chain-attacks
What happened
Sophos X-Ops reports two same-day supply-chain attacks targeting developer tools used by Checkmarx and Bitwarden. Both incidents share the same command-and-control domain, indicating a coordinated pipeline compromise of build/developer tooling that could allow malicious code to be distributed downstream through affected software. No specific CVE identifiers were disclosed in the report.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sophos_news
- Record identifier
- d7691afb4abcd4b8cdf4a102a3b9b03c7c6c833084fceb15757045e46bbb537f
- Enrichment time
- 2026-04-28T20:51:36Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.