Cisco says DevHub site leak won’t enable future breaches

Cisco disclosed that a misconfigured public DevHub portal exposed non-public files—some belonging to CX Professional Services customers—which a threat actor (IntelBroker) published; Cisco says it fixed the configuration, notified affected customers, and found no evidence of production or financial system compromise, though the actor also claims access to a third-party JFrog developer environment via an exposed API token.