5529

An unknown threat actor breached US cybersecurity vendor Trellix, exploited development and security infrastructure to insert trojans into updates and extensions, and stole access credentials and Trellix source code; the company has notified law enforcement and retained forensic experts to investigate.