Trellix Confirms Source Code Breach With Unauthorized Repository Access
2026-05-02T13:24:14Z•7e5cb1634157a02a40671f0ce2fc634f90aecc109547f8a776dc3a66ee453c5a
CI-tamperingCISA-KEVGitHubGo-modulesLPEPyPIRubyGemsSSO-abuseactive-exploitationbackdoorcredential-theftespionagemalwarenation-statenpmphishingprivilege-escalationransomwaresource-code-breachsupply-chainunpatched-vulnerabilityvishingwiper
What happened
A surge of high-impact incidents and active-exploitation advisories: Trellix confirmed unauthorized access to part of its source-code repository; a Vietnamese-linked AccountDumpling phishing campaign abused Google AppSheet to harvest ~30,000 Facebook accounts; two fast-moving cybercrime clusters (Cordial Spider and Snarky Spider) are conducting vishing/SSO abuse for rapid SaaS extortion; and Trend Micro identified a China-aligned espionage cluster (SHADOW-EARTH-053) targeting governments, journalists, and activists. Multiple supply‑chain compromises and malware campaigns were reported (malic i
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 7e5cb1634157a02a40671f0ce2fc634f90aecc109547f8a776dc3a66ee453c5a
- Enrichment time
- 2026-05-02T13:24:14Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.