Poisoned Pipeline / Techniques / T0194
Outdated software components
CI/CD Posture Container Security Infrastructure as code Open Source Security
Outdated software components can impact various aspects of security.
The obvious one is, of course, outdated software usually means unpatched vulnerabilities.
But it also means that in case of an incident it will be harder for an organization to react and patch because it has higher risk of breaking functionality.
Where this idea came from
Identified in published CI/CD or supply-chain security research cited below.
Mitigations
- M1500 Verify third-party artifacts and open-source libraries
- M1503 Implement SCA analysis
- M1720 Implement regular patches and updates
Detections
- D1261 Implement penetration testing
- D1262 Implement vulnerability assessment
- D1510 Implement Intrusion Detection System and anti-malware
Observed in incidents (2)
- Exposed operator staging host reveals autonomous AI-agent crypto-theft fleet
- Webmin 1.890–1.920 build-server backdoor