Cisco source code stolen in Trivy-linked dev environment breach

Cisco was breached after attackers leveraged a malicious GitHub Action delivered through the Trivy supply-chain compromise to steal CI/CD credentials, clone over 300 repositories (including corporate and customer source code), and exfiltrate AWS keys; security teams contained the initial breach, are reimaging systems and rotating credentials, and investigators link the activity to the TeamPCP group and related supply-chain campaigns.