CI/CD Supply Chain Attacks for Data Exfiltration or Cloud Account Takeover
![](https://www.praetorian.com/wp-content/uploads/2024/06/5ce567cedadc990b554ca78e_20190522-cicd-supplychain-attack-thumb.jpg)
The great challenge of securing CI/CD lies in the nature of the beast. Building arbitrary code and CI/CD scripting tools grant the attacker RCE from the get-go. In this blog we examine a fairly robust architecture, how to break it, and how to further harden the design.