[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpsdVGTCkRn5tmYXYqG1d5F_ELMe0Kp6jkOpzbO7txcM":3},{"article":4,"iocs":36,"watch_terms":40,"solutions":41,"lesson":137},{"id":5,"title":6,"slug":7,"summary":6,"ai_summary":8,"brief":9,"url":10,"image_url":11,"published_at":12,"ingested_at":13,"relevance_score":14,"entities":15,"category_id":16,"category":17,"article_tags":20},"f916b230-2552-426d-a5bf-cc4b93afbefa","‼️ Source code and data stolen from Cisco by ShinyHunters https:\u002F\u002Ft.co\u002F4yS0zvGXhA","source-code-and-data-stolen-from-cisco-by-shinyhunters-https-t-co-4ys0zvgxha","ShinyHunters, a known threat actor, has stolen source code and data from Cisco in what appears to be a significant supply chain incident. The breach potentially exposes Cisco's intellectual property and could enable further attacks against Cisco customers. This marks another high-profile compromise of a major technology vendor.","ShinyHunters threat group steals Cisco source code and data.","https:\u002F\u002Fx.com\u002FDarkWebInformer\u002Fstatus\u002F2039356468894298585",null,"2026-04-01T14:57:26+00:00","2026-04-01T15:00:16.238966+00:00",8,[],"2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":16,"icon":11,"name":18,"slug":19},"Breaches","breaches",[21,26,31],{"category":22},{"id":23,"icon":11,"name":24,"slug":25},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":27},{"id":28,"icon":11,"name":29,"slug":30},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":32},{"id":33,"icon":11,"name":34,"slug":35},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[37],{"type":30,"value":38,"context":39},"ShinyHunters","Threat actor responsible for Cisco source code and data theft",[],{"controls":42,"vendors":130},[43,72,101],{"slug":44,"name":45,"problem":46,"products":47},"immutable-backup","Immutable backup and recovery","Ransomware cannot delete or encrypt your way back.",[48,56,64],{"vendor_slug":49,"vendor_name":50,"vendor_logo":51,"product_slug":52,"product_name":53,"url":54,"description":55},"veeam","Veeam","\u002Fvendor-logos\u002Fveeam.png","veeam-data-platform","Veeam Data Platform","https:\u002F\u002Fwww.veeam.com\u002Fproducts\u002Fveeam-data-platform.html","Backup and recovery for virtual, physical, cloud and SaaS workloads, with immutable storage options.",{"vendor_slug":57,"vendor_name":58,"vendor_logo":59,"product_slug":60,"product_name":61,"url":62,"description":63},"rubrik","Rubrik","\u002Fvendor-logos\u002Frubrik.png","zero-trust-data-protection","Rubrik Zero Trust Data Protection","https:\u002F\u002Fwww.rubrik.com\u002Fproducts\u002Fdata-protection","Air-gapped, immutable backup for on-premises, cloud and SaaS data, with threat detection in backups and orchestrated recovery.",{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"commvault","Commvault","\u002Fvendor-logos\u002Fcommvault.png","commvault-cloud","Commvault Cloud","https:\u002F\u002Fwww.commvault.com\u002Fplatform","Backup and recovery platform with immutable storage and recovery testing.",{"slug":73,"name":74,"problem":75,"products":76},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[77,85,93],{"vendor_slug":78,"vendor_name":79,"vendor_logo":80,"product_slug":81,"product_name":82,"url":83,"description":84},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","unit-42-retainer","Unit 42 Retainer","https:\u002F\u002Fwww.paloaltonetworks.com\u002Funit42\u002Fretainer","Incident response retainer with Unit 42, including preparation services.",{"vendor_slug":86,"vendor_name":87,"vendor_logo":88,"product_slug":89,"product_name":90,"url":91,"description":92},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","mandiant-incident-response","Mandiant Incident Response","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fconsulting\u002Fmandiant-incident-response-services","Incident response services from Mandiant, available on retainer.",{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","incident-response","CrowdStrike Incident Response","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Fincident-response\u002F","Incident response services, available on retainer.",{"slug":102,"name":103,"problem":104,"products":105},"third-party-risk-management","Third-party risk management (TPRM)","You know which suppliers could hurt you, and you hear quickly when one of them is breached.",[106,114,122],{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":110,"product_name":111,"url":112,"description":113},"upguard","UpGuard","\u002Fvendor-logos\u002Fupguard.png","upguard-vendor-risk","UpGuard Vendor Risk","https:\u002F\u002Fwww.upguard.com\u002Fproduct\u002Fvendor-risk","Supplier security questionnaires, ratings and continuous monitoring.",{"vendor_slug":115,"vendor_name":116,"vendor_logo":117,"product_slug":118,"product_name":119,"url":120,"description":121},"onetrust","OneTrust","\u002Fvendor-logos\u002Fonetrust.png","third-party-management","OneTrust Third-Party Management","https:\u002F\u002Fwww.onetrust.com\u002Fsolutions\u002Fthird-party-management\u002F","Supplier inventory, risk assessments and monitoring across privacy and security.",{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":126,"product_name":127,"url":128,"description":129},"bitsight","Bitsight","\u002Fvendor-logos\u002Fbitsight.png","bitsight-tprm","Bitsight Third-Party Risk Management","https:\u002F\u002Fwww.bitsight.com\u002Fproducts\u002Fthird-party-risk-management","Supplier assessments and continuous monitoring based on security ratings.",[131],{"slug":132,"name":133,"logo_path":134,"roles":135},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png",[136],"affected",{"slug":138,"title":139,"body":140,"framework_refs":141,"framework_notes":147},"major-technology-vendor-compromised-by-shinyhunters-threat-group","Major Technology Vendor Compromised by ShinyHunters Threat Group","Cisco suffered a significant breach by the ShinyHunters threat actor group, resulting in theft of source code and sensitive data. This incident highlights the critical risk that supply chain compromises pose to enterprise security, as attacks against major vendors can cascade to affect thousands of downstream customers. The theft of source code is particularly concerning as it may enable attackers to discover zero-day vulnerabilities in widely-deployed products. Organizations must recognize that even trusted technology partners can become attack vectors and prepare accordingly.",[142,143,144,145,146],"CIS Control 15","NIST SP 800-161","NIST SC-30","ISO 27036","GDPR Article 28",{}]