Attackers compromised Cisco's internal development environment by leveraging credentials stolen via the recent Trivy supply-chain attack, resulting in the exfiltration of AWS keys and the cloning of over 300 source code repositories. The article does not provide a CVSS score, specific affected or fixed version numbers for a Cisco product, or a recommended workaround.
Cisco reportedly suffered a breach of its internal development environment after attackers leveraged credentials stolen during the recent Trivy supply-chain compromise. More details linked with sample data submitted by /u/raptorhunter22 [link] [comments]