
Checkmarx appoints Kobi Sivilya as CISO and CIO
Sivilya previously led security and IT at Outbrain and security engineering at Fireblocks.
12 stories, newest first · one card per story

Sivilya previously led security and IT at Outbrain and security engineering at Fireblocks.

Anthropic customers can apply part of their existing spend commitment toward Checkmarx Fusion SAST, Triage, and Remediation Assist.

A PHP advisory requires a runtime update because the attack path can run before application code.

Wiz promotes ASPM connectors that centralize scanner findings and prioritize exploitable application risks.

MALFEX npm packages hide Windows malware in fake PNG files, delivering Overlord RAT and the movinlike stealer.

A 2026 comparison ranks twelve SAST tools, with CodeQL, Snyk Code, and SonarQube leading their lanes.

EY says a tax-platform breach exposed Goldman Sachs and Man Group clients' personal and financial data.

Ongoing NPM supply chain campaign hides malware in indexed-btree's prototype code, reaching 2 million weekly downloads before detection.

Malicious npm package 'indexed-btree' with 2M weekly downloads hides runtime malware using blockchain-based command-and-control.

Malicious npm package 'indexed-btree' hides a loader in runtime code to evade install-script defenses, reaching 2 million weekly downloads alongside nine related packages.

Checkmarx launches Triage & Remediation Assist, an AI feature in Checkmarx One that assesses SAST/SCA finding reachability and generates suggested code fixes.
Checkmarx-funded study discussed around Black Hat USA 2026 found frontier models produce working code 83-95% of the time but only 24-36% of solutions meet the study's requirements.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views