Cisco Disables DevHub Access After Security Breach

Cisco disabled public access to a DevHub environment after threat actors (IntelBroker, EnergyWeaponUser, and zjj) downloaded and posted for sale files containing source code, Git repositories, API tokens, hardcoded credentials, certificates, and other secrets tied to major companies; Cisco says its own systems appear unaffected while it investigates and recommends securing public-facing assets and secrets.