Checkmarx KICS Docker Repo Hijacked in Malicious Code Injection Attack

A massive software supply chain attack has targeted the official Checkmarx KICS (Keeping Infrastructure as Code Secure) Docker Hub repository. Discovered on April 22, 2026, by Docker and Socket, the compromise involves trojanized Docker images and malicious VS Code extensions designed to harvest and exfiltrate highly sensitive developer credentials and cloud infrastructure secrets. Threat actors […]

The post Checkmarx KICS Docker Repo Hijacked in Malicious Code Injection Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.