2026-03-31 · 2026-Q1
Cisco Source Code Stolen via Trivy Breach
Outside the model: Adjacent ecosystemAgent tooling was not the attack surface, so no layer applies.
- Fixable
- Architectural
- Vendor response
- Unknown
- In the wild
- Yes
- Actor
- Not applicable
Target
Cisco internal dev environment
Impact
300+ GitHub repos cloned including AI product source code and customer code from banks and US government agencies
Root cause
Credentials harvested during TeamPCP's Trivy compromise used to access Cisco dev infrastructure
Sources
Catalog
Cite this: AgentProv incident record: Cisco Source Code Stolen via Trivy Breach (2026-03-31). https://agentprov.com/incidents/2026-03-31-cisco-source-code-stolen-via-trivy-breach