Weaponizing the Protectors: TeamPCP’s Multi-Stage Supply Chain Attack on Security Infrastructure

TeamPCP executed a sophisticated, multi-stage supply chain attack by compromising trusted open-source security tools and developer infrastructure, enabling mass theft of cloud credentials and secrets from hundreds of thousands of organizations and establishing persistent, destructive access to critical environments.