Skip to content

IA1 record

Incident Analysis

Reconstructions of confirmed intrusions: entry point, dwell time, impact and the controls that would have changed the outcome.

1 matching records

Category
Severity
Sort

1 record

IA-0001Severity: critical

Build Pipeline Compromise: When the Artifact Is the Payload

An intrusion that never touched production directly. The attacker modified a build agent, and the organisation shipped the backdoor itself through its own signed release channel.

Incident Analysis4 min