IA-0001Severity: critical
Build Pipeline Compromise: When the Artifact Is the Payload
An intrusion that never touched production directly. The attacker modified a build agent, and the organisation shipped the backdoor itself through its own signed release channel.
Incident Analysis4 min