Trellix Discloses Unauthorized Source Code Access

Cybersecurity firm Trellix disclosed that threat actors recently gained unauthorized access to a portion of its source code repository, prompting an immediate investigation with external forensic experts and notification to law enforcement authorities.

The company, formed in 2021 from the merger of McAfee Enterprise and FireEye, published the details in a statement on its website. "Trellix recently identified unauthorized access to a portion of our source code repository," the statement read. "Upon learning of this matter, we immediately began working with leading forensic experts to resolve it. We have also notified law enforcement."

Trellix serves more than 50,000 business and government customers worldwide, with its security solutions protecting hundreds of millions of endpoints and systems. The firm provides threat intelligence, AI-powered detection and response services, network detection and response, endpoint detection and response, data security, and email security.

Initial findings from the investigation show no evidence that the company's source code release or distribution processes were affected, or that the accessed code has been exploited or altered. Trellix stated...