Gray Hats, SOCRadar, and others describe Cisco's internal dev environment being breached via a poisoned Trivy supply chain vector, leading to cloning hundreds of GitHub repos and theft of AWS keys.
Cisco's internal dev environment was breached via a poisoned Trivy plugin.
TeamPCP exfiltrated 300+ repos and AWS keys in a massive 2026 supply chain strike.
Entry: Stolen credentials via the Trivy supply chain attack.
Access: 300+ internal repositories cloned.
Extraction: Sensitive AWS keys and GitHub assets exposed.
This finding is one of many signals tracked across Cyber Security. The live feed updates every few hours with new expert voices, debates, and emerging ideas.
← Back to Cyber Security