Great article from @culafia in @DarkReading breaking down TeamPCP’s rise and the broader shift happening across software supply chain attacks. One of the biggest changes we’re seeing right now is that attackers are increasingly targeting trust itself. Modern development environments, collaboration platforms, open-source ecosystems, and developer workflows have all become attractive attack surfaces because compromising trust can scale faster than attacking infrastructure directly. Groups like TeamPCP continue to demonstrate how effective social engineering, workflow compromise, and trusted-tool abuse can be against organizations using legacy tools. Appreciate the opportunity to share my perspective. Check out the article: darkreading.com/application-…