Cybersecurity company Trellix confirmed unauthorized access to a portion of its source code repository. The company is working with forensic experts and has notified law enforcement, though no evidence of source code exploitation or impact on distribution processes has been found yet.
Initial Access
Repository Access Gained
confirmed
An unknown threat actor achieved unauthorized access to Trellix's source code repository. The specific method of initial access was not disclosed by the company.
Defender cut points
Implement strong access controls and multi-factor authentication (MFA) for all source code repositories.Conduct regular security audits and penetration testing on code repositories.
