CI/CD pipeline compromise used to poison builds at 40 organisations
·Supply chainCritical
A threat actor gained access to a shared build infrastructure provider and injected malicious steps into pipelines at 40 customer organisations, inserting backdoors into software shipped to end users.
Deception angle
After a supply-chain compromise, attackers land inside developer networks with valid build credentials. A decoy development server — fake GitLab instance, fake package registry — catches them the moment they start exploring for further access.
Read about Kandaro Deception, or browse more security news.