Lapsus$ Claims Checkmarx Breach, Google Adjusts Bug Bounty, Blackwater Hits Hospitals

Cyber Updates - Asher Tamam reports that the Lapsus$ group claims a 96GB data leak from Checkmarx, allegedly leveraging credentials stolen via a Trivy tool. The purported data includes a Linux 0-day vulnerability (dubbed “Copy Fail”) and other findings impacting major organizations. This highlights the severe risk supply chain tools pose when compromised, providing attackers a direct path into development environments and sensitive intellectual property.

Separately, Google is recalibrating its Bug Bounty program, decreasing Chrome rewards while increasing Android payouts, with a sharper focus on high-impact, complex vulnerabilities. This shift likely reflects the rising efficacy of AI tools in discovering simpler bugs, pushing researchers towards more sophisticated findings. Meanwhile, French authorities arrested a 15-year-old, known as “breach3d,” suspected of selling 12-18 million stolen records from the ANTS agency, demonstrating the persistent threat of insider or opportunistic data theft, regardless of the perpetrator’s age.

In other developments, the Blackwater group is attributed to a ransomware attack on Minidoka Hospital in the US, threatening data publication within seven days—another critical hit on the vulnerable healthcare sector. Trellix also confirmed unauthorized access to a portion of its source code repository, though no evidence of release or exploitation has been found yet. These incidents underscore the relentless targeting of critical infrastructure and the ongoing battle for sensitive intellectual property.