Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
Living Off the Pipeline: Defending Against CI/CD Subversion
Excerpt
The software supply chain has become one of the most attractive targets for modern adversaries, but the attacks seen in 2025 did not focus solely on poisoning dependencies or hijacking packages. Increasingly, attackers are targeting the infrastructure that powers the software delivery lifecycle itself. Build servers, CI/CD runners, package managers, and developer workstations all sit inside an organization’s trusted delivery path. They are designed to execute code…
Read the original report →Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2023-42793 | Medium | Score 56/100 | First seen |
IOC Relationship Graph
Building graph…