Trivy supply chain intrusion reportedly compromises Cisco source code

Threat operation TeamPCP, also known as PCPcat, DeadCatx3, and ShellForce, has tapped credentials siphoned from its sweeping supply chain attacks against Trivy, LiteLLM, and Telnyx to compromise AWS environments and facilitate additional data theft, SecurityWeek reports.