Cisco Faces Major Cyberattack: Source Code Stolen from Internal Systems
Cisco has recently experienced a significant cyberattack that compromised its internal development environment. Attackers utilized stolen credentials from the Trivy supply chain attack to breach Cisco’s systems and access sensitive source code, affecting various products, including AI tools.
The breach, linked to the TeamPCP threat group, involved a malicious GitHub Action plugin that allowed hackers to steal credentials from Cisco’s build environment. Over 300 GitHub repositories were cloned during the incident, some containing source code for products used by corporate clients, including banks and government agencies.
While Cisco has contained the initial breach and isolated affected systems, the fallout from this attack is expected to continue. The company is actively reimaging systems and rotating credentials to enhance security.
To protect against similar attacks, organizations should implement robust credential management practices and regularly update security protocols.
Risk Level: High
Source: View Original Report
