Cisco Faces Alleged Data Leak as ShinyHunters Claims Responsibility

Cisco suffered a major supply-chain breach after a malicious GitHub Action tied to the Trivy vulnerability scanner enabled attackers to access internal build environments, steal multiple AWS keys, and clone 300+ private repositories containing unreleased source code and potential customer data. ShinyHunters claimed the data theft while researchers attribute the Trivy compromise to TeamPCP using a 'Cloud Stealer' tool; Cisco has isolated affected systems, rebuilt compromised machines, and forced credential resets but expects ongoing complications.