Related Threat Clusters
-
Massive Data Breach at US Social Security Administration and Cyberattacks on European Infrastructure
In 2026, significant cybersecurity incidents have emerged, including a data breach at the US Social Security Administration (SSA) linked to the Department of Government Efficiency (DOGE) led by Elon Musk. Reports…
2 articles · Updated July 7, 2026 -
2026 Cyberattacks Target Critical Infrastructure and Data Breaches
In 2026, cyberattacks have escalated from data theft to targeting critical infrastructure, affecting government systems, educational platforms, and medical technology companies. The U.S. Department of Government…
2 articles · Updated June 7, 2026 -
TeamPCP Compromises Microsoft DurableTask and GitHub Actions in Supply Chain Attack
The TeamPCP threat group has expanded its supply chain attack campaign, compromising the Microsoft DurableTask Python client with versions v1.4.1, v1.4.2, and v1.4.3 found to contain a credential-stealing worm. This…
11 articles · Updated May 20, 2026 -
LiteLLM Supply Chain Attack Exposes Critical Credentials
On March 24, 2026, two versions of the LiteLLM Python package (1.82.7 and 1.82.8) were compromised on PyPI, embedding credential-stealing payloads. The attack, linked to the TeamPCP threat actor, exploited a…
3 articles · Updated June 12, 2026 -
Critical Cisco IMC Vulnerability Allows Full Admin Access via Authentication Bypass
Cisco Systems has disclosed a critical authentication bypass vulnerability, CVE-2026-20093, affecting its Integrated Management Controller (IMC) with a CVSS score of 9.8. This flaw allows unauthenticated remote…
6 articles · Updated April 2, 2026 -
Checkmarx Jenkins Plugin Compromised by TeamPCP Malware Attack
Checkmarx reported a malicious version of its Jenkins AST plugin was uploaded to the Jenkins Marketplace on May 9, 2026. This backdoored plugin, which affects security scans in Jenkins CI pipelines, poses a significant…
15 articles · Updated May 11, 2026 -
Evolution of Chinese-Nexus Cyber Operations: Strategic Long-Term Threats
Recent research from Darktrace reveals the evolution of Chinese-nexus cyber operations over the past two decades, highlighting a shift from high-volume attacks to more strategic, identity-centric intrusions. This change…
381 articles · Updated April 2, 2026 -
LiteLLM Python Package Compromised in Major Supply Chain Attack by TeamPCP
On March 24, 2026, two malicious versions of the LiteLLM Python package (1.82.7 and 1.82.8) were published on PyPI, containing credential-stealing malware. The attack, attributed to the TeamPCP threat group, exploited…
53 articles · Updated March 24, 2026 -
Trivy Vulnerability Scanner Compromised in Supply Chain Attack
The Trivy vulnerability scanner was compromised in a supply-chain attack by TeamPCP, which injected credential-stealing malware into official releases and GitHub Actions. The breach was disclosed on March 21, 2026, and…
34 articles · Updated March 21, 2026 -
Mercor Cyberattack Linked to LiteLLM Supply Chain Compromise
AI recruiting startup Mercor confirmed it was impacted by a supply chain attack linked to the LiteLLM project, which has affected thousands of organizations. The breach was attributed to the hacking group TeamPCP, with…
30 articles · Updated April 1, 2026
Recent Intelligence Reports
- Shai-Hulud hackers: two men charged over TeamPCP’s global supply chain crime spree that hit OpenAI, and thousands more — Grahamcluley · August 28, 2026
- Tracker — www.globenewswire.com · August 27, 2026
- KELA research leads to alleged TeamPCP Members Arrested — Markets.Businessinsider · August 27, 2026
- Two alleged TeamPCP members arrested and charged after months of software supply — Cyberscoop · August 27, 2026
- Extending AI Security Visibility with Darktrace and Microsoft Agent 365 — Darktrace · August 4, 2026
- Why Trust is the New Attack Surface: Darktrace's Mid — Darktrace · August 3, 2026
- Hacked, leaked, and held for ransom: The worst breaches of 2026 so far — Techcrunch · July 7, 2026
- Warning Over “Industrialized” Cyber — Infosecurity-Magazine · July 3, 2026