Application Control Bypass for Data Exfiltration, (Tue, Mar 31st)

Multiple SANS ISC diary entries (late Mar 2026) highlight an ongoing high-impact supply‑chain campaign attributed to the TeamPCP group: successive updates describe PyPI compromises (including LiteLLM and a Telnyx-related package), weaponization of a security scanner, broader Checkmarx scope, Vect ransomware partnering via a mass‑affiliate program, dual ransomware operations, and published victim data (AstraZeneca). Databricks is reported as investigating an alleged compromise. Separate posts cover application‑control bypass techniques used to enable data exfiltration and analytic findings from