2026-03-31 · 2026-Q1
Cisco Source Code Stolen via Trivy Breach
Outside the model: Adjacent ecosystem Agent tooling was not the attack surface, so no layer applies.
- Fixable:
- No, architectural
- Vendor response:
- Unknown
- In the wild:
- Yes
Target
Cisco internal dev environment
Impact
300+ GitHub repos cloned including AI product source code and customer code from banks and US government agencies
Root Cause
Credentials harvested during TeamPCP's Trivy compromise used to access Cisco dev infrastructure