Solo podcast: A deep dive on TeamPCP
About this episode
James Wilson takes a detailed look at TeamPCP's evolution from clumsy attacks to sophisticated credential harvesting.
In this solo episode, James Wilson takes a detailed look at TeamPCP. It started off by launching clumsy attacks against misconfigured Kubernetes clusters in September 2025. But by February this year, TeamPCP had skilled up and was smashing global software supply chains in the highest profile attacks of 2026. TeamPCP upskilled and turned the software development ecosystem into its personal credential harvesting machine. Here’s how TeamPCP did it, and what we can learn from it.
More episodes of Risky Business Features
- Why NPM v12 won’t stop supply chain attacks
- Everything is getting much worse, much faster
- How to survive supply chain attacks
- How the CopyFail disclosure went sideways
- NCSC’s Ollie Whitehouse on surviving the "bugpocalypse"
- What a great agentic AI deployment plan looks like
Explore listener stats, chart rankings, contacts and more on the Risky Business Features podcast page.