Checkmarx Unveils Innovative Collaborative Hub
Checkmarx, a leader in cloud-native application security, has recently launched its Checkmarx Zero Research Hub. This new initiative represents a significant step forward in sharing vital threat intelligence concerning application security and software supply chain risks. With this hub, the company aims to foster collaboration among researchers and organizations focused on enhancing security standards.
Insights from Erez Yalon
According to Erez Yalon, the Vice President of Security Research at Checkmarx, the Checkmarx Zero team has consistently shared its discoveries through various forums, including blogs and conference sessions. As the team continues to contribute valuable findings, they invite additional researchers in the AppSec and software supply chain domains to explore their vulnerabilities and share insights to bolster collective safety.
Key Features of the Research Hub
The Checkmarx Zero Research Hub is rich in content, featuring comprehensive findings drawn from years of diligent research. Here are some highlights:
- Over 200 vulnerabilities documented each month.
- More than 130 identified zero-day vulnerabilities.
- Extensive research reports detailing malicious package names and indicators of compromise (IOCs).
Notable Discoveries and Threat Campaigns
Checkmarx Zero is recognized for uncovering several significant vulnerabilities and threat actors in recent years. Some of their most noteworthy discoveries include:
- A vulnerability related to Amazon Ring, which exposed users’ camera recordings.
- An ongoing campaign from a group called RED-LILI that executed hundreds of malicious packages targeting Azure and developers via NPM.
- The initial detection of software supply chain attacks that specifically targeted the banking industry.
Exploring the Research Site
Researchers and security professionals interested in further insights can access the Checkmarx Zero hub directly at checkmarx.com/zero. Additionally, for real-time updates and to connect with the Checkmarx Zero team, they are active on social media channels.
About Checkmarx
Checkmarx is dedicated to providing solutions that empower large enterprises to manage application security efficiently without impacting their development pace. The growing number of applications and rising threats necessitate improved risk management solutions. Checkmarx eliminates uncertainty by enabling critical issue identification, allowing developers to focus on their work seamlessly. The Checkmarx platform supports security and development teams, with countless enterprises depending on it to scrutinize over one trillion lines of code each year, helping them achieve a 2X ROI and reducing the developer’s effort on security tasks by 50%. Checkmarx stands true to its mantra: Always Ready to Run.
Frequently Asked Questions
What is the primary purpose of the Checkmarx Zero Research Hub?
The hub aims to share vital threat intelligence and foster collaboration among security researchers to improve application security.
Who can contribute to the Checkmarx Zero Research Hub?
Any researchers specializing in application security and software supply chain security are invited to explore the hub and share their findings.
How many vulnerabilities does Checkmarx document each month?
Checkmarx curates over 200 vulnerabilities each month and has identified more than 130 zero-day vulnerabilities.
What types of threats has Checkmarx Zero discovered?
They have uncovered significant vulnerabilities and threats, including those affecting Amazon Ring and banking industry attacks.
Where can people find more information about Checkmarx?
More information can be accessed through their research hub at checkmarx.com/zero, and they maintain an active presence on various social media platforms.
