#CheckmarxZero

Checkmarx Zero

@checkmarxzero.bsky.social

3 months ago

Checkmarx Zero Takes Down Malicious “Prettier” Alternative Found In VSCode Marketplace - Checkmarx Checkmarx Zero took down a malicious VSCode Extension posing as "Prettier Plus" (an apparent attempt to leverage Brandjacking of the legitimate and popular "Prettier").

It’s worth understanding how this attack worked—and how to protect your organization. It’s off the Marketplace, but adversaries will absolutely try again.
buff.ly/TRAMPpN
#OpenSourceSecurity #DeveloperSecurity #CheckmarxZero 🧵5/5

Checkmarx Zero

@checkmarxzero.bsky.social

4 months ago

💡 Checkmarx customers with Malicious Package Protection (MPP) will find these flagged automatically in scans.
Use Global Inventory to check if past scans include them.
#CheckmarxZero #SoftwareSecurity 🧵5/6

Checkmarx Zero

@checkmarxzero.bsky.social

4 months ago

Defenders need to recognize that #AIintegration expands attack surfaces.
AI APIs and assistants can become adversary infrastructure — another layer for detection and control.
Details: buff.ly/4ay9Kvz
#LLMsecurity #SupplyChainSecurity #CheckmarxZero #AIsafety 🧵3/3

Checkmarx Zero

@checkmarxzero.bsky.social

6 months ago

Defenses against LITL aren’t automatic. They depend on how you approach AI in the loop.

See the details and stay ahead: buff.ly/whnCtFv 🧵4/4

#CheckmarxZero #AppSec #AISecurity #MachineLearning #SecureCoding

Checkmarx Zero

@checkmarxzero.bsky.social

6 months ago

Checkmarx Zero researchers created this tactic while stress-testing AI code assistants. It shows how thin the line can be between human oversight and human exploitation. 🧵3/4

#CheckmarxZero #AI #AIagents #AppSec

Checkmarx Zero

@checkmarxzero.bsky.social

6 months ago

Bypassing AI Agent Defenses With Lies-In-The-Loop - Checkmarx Lies-in-the-loop is a new attack that bypasses AI agent's "human-in-the-loop" defenses to run malicious code on user machines. Learn what it does and how we uncovered it.

Using AI agents or coding assistants? You might have a LITL problem.

“Lies in the loop” can bypass defenses that rely on a human-in-the-loop check.

Learn more: buff.ly/whnCtFv 🧵1/4

#CheckmarxZero #AppSec #AI #AISecurity #MachineLearning #AIagents #SecureCoding

Checkmarx Zero

@checkmarxzero.bsky.social

6 months ago

The AI vs CAPTCHA battle isn’t over, but defenders need layers. Read the full breakdown here: buff.ly/IWvfK7l
#CheckmarxZero #AppSec #CyberSecurity 🧵 6/6