Cisco Source Code Stolen in Supply Chain Attack Attributed to TeamPCP

Key Points

• Cisco confirms source code theft in supply chain attack
• Attack attributed to TeamPCP hacker group
• Group compromising security software to steal user credentials
• Part of ongoing campaign affecting multiple vendors

Full Details

Cisco has disclosed that it became the latest victim of a sophisticated software supply chain attack, with threat actors stealing portions of its source code and customer information. The attack has been attributed to the TeamPCP hacker group, which has been conducting a broader campaign compromising multiple security software vendors. The group inserts malicious code into legitimate security software, then uses that compromised access to steal user credentials and sensitive data. This incident adds Cisco to a growing list of companies affected by supply chain attacks, highlighting the systemic vulnerabilities in software development and distribution pipelines. The breach raises concerns about the integrity of Cisco's security products and the potential for downstream effects on customers who rely on the company's infrastructure solutions.