Checkmarx in the News

June 4, 2025

Malicious PyPI, npm, and Ruby Packages Exposed in Ongoing Open-Source Supply Chain Attacks

Several malicious packages have been uncovered across the npm, Python, and Ruby package repositories that drain funds from cryptocurrency wallets, erase entire codebases after installation, and exfiltrate Telegram API tokens…

May 29, 2025

Checkmarx Surfaces Malicious Effort to Compromise Software Supply Chains

Checkmarx, this week, reported it has discovered malicious software packages that, in addition to injecting malware capable of bypassing endpoint security to exfiltrate data, also provide persistent remote access and control of…

May 3, 2025

RSAC 2025: 4 Cybersecurity Trends Shaping Tomorrow’s Threatscape

Erez Yalon, head of security research at Checkmarx, spun up a shopping list program using a simple English-language prompt, then showed how easy it is to force an LLM to spew incorrect and dangerous results…

April 29, 2025

Have a Beef With AI? Here’s How to Poison a Large Language Mode

At RSAC, a security researcher explains how bad. actors can push LLMs off track by deliberately introducing false inputs, causing them to spew wrong answers in generative AI apps..

April 25, 2025

Checkmarx One Breaks the AppSec Barrier by Delivering ASPM Directly to Developers

Checkmarx has announced the availability of the industry’s most robust application security posture management (ASPM) solution within the most widely used integrated development environments (IDEs). Checkmarx One dramatically…

April 21, 2025

What does the future of AI-powered software development look like — and how secure is it?

AI is permanently changing the face of software development, transforming the workflows of development teams. While most of these changes are positive, companies must be prepared to tackle the increased risks that come with it…

April 8, 2025

Jonathan Rende Joins Checkmarx as Chief Product Officer

With his extensive leadership experience and deep understanding of software product development, AI and machine learning, Rende is uniquely positioned to offer strong vision and direction as the company continues its journey of…

April 4, 2025

How Agentic AI Is Revolutionizing Security—And How To Keep It Safe

Organizations should implement red-teaming and penetration testing to assess vulnerabilities within their AI systems and ensure they are resistant to new threats. As Ori Bendet, VP of product management at Checkmarx, highlights,…

April 1, 2025

DevSecOps Evolution Continues but Still in Early Stages

Development and security teams are making strides in the evolution to DevSecOps but are still working toward alignment on workflows and metrics, according to DevSecOps Evolution: from DevEx to DevSecOps, a report from Checkmarx…