Poisoned Pipeline / Mitigations / M1720
M1720
Implement regular patches and updates
Regular patches and updates are necessary to improve the security, performance, and reliability of software and systems.
They include bug fixes, security updates, and performance improvements.
Regular patches and updates also ensure compatibility with new technologies and can help maintain compliance with regulatory standards.
Failure to install patches and updates can leave systems vulnerable to security threats, cause system failures or crashes, and limit the functionality of software and systems.
Applies to
- T0210 Poison AI coding-agent config or workspace
- T0153 Compromised developer workstation
- T0188 Cross Site Request Forgery
- T0105 Active scanning
- T0180 Compromise services / servers
- T0104 Discover coding flaws
- T0135 Vulnerable CICD system
- T0147 Scan public CI/CD configurations for secrets and vulnerable actions
- T0102 Discover used open-source dependencies
- T0211 Abuse registry-adjacent builders as remote execution
- T0123 Exposed internal API
- T0139 Resource hijacking
- T0176 Disable or misconfigure security measures
- T0115 Repojacking
- T0101 Discover technology stacks
- T0100 Discover naming conventions
- T0118 Command injection
- T0172 Runtime backdoor
- T0116 Shadow IT
- T0197 Use code from untrusted source
- T0194 Outdated software components
- T0142 Accidental public disclosure of internal resources
- T0203 Discover localized out-of-band deployments
- T0177 Misconfiguration of serverless workloads
- T0190 Weak encryption
- T0108 Accounts in public registry
- T0133 Vulnerable CICD plugins
- T0191 Malicious code in artifacts
- T0158 Vulnerable CI/CD template
- T0106 Scan configuration on public resources
- T0127 Exposed database