https://curasec.metacog.co.kr/tags/sdlc/Recent content in Sdlc on CuraSecHugoen-usSat, 22 Aug 2026 11:32:44 +0000https://curasec.metacog.co.kr/insights/2026-08-22-connecting-the-dots-securing-the-overlooked-corners-of-the-s/Sat, 22 Aug 2026 11:32:44 +0000https://curasec.metacog.co.kr/insights/2026-08-22-connecting-the-dots-securing-the-overlooked-corners-of-the-s/<ul> <li><strong>Engineer — Learn:</strong> Reinforces the case for auditing CI/CD pipeline permissions, pinning action versions, and reviewing third-party developer tool integrations — no specific CVE or active exploit to act on now.</li> <li><strong>SOC/IR — Learn:</strong> Useful framing for expanding hunt coverage into build pipeline logs and developer tooling telemetry, but no IOCs or specific TTPs are surfaced in this piece.</li> <li><strong>Leader — Skip</strong></li> </ul>