OpenPLC Supply Chain Security: When Compilation Builds the Attack

An attacker may not need to deliver a finished payload if the engineering pipeline builds it for them. Explore OpenPLC research through trusted source code, repositories and automated compilation. The episode examines when the software build process becomes part of an industrial attack path. Related CUP episodes: When Your Security Scanner Becomes the Trojan Horse: The CERT-EU Supply Chain Breach Windchill Security: Restoring Trust in Engineering Data Signed Firmware: Why the Signature Is Only Part of the Trust Chain Automotive Software Updates: Securing the Firmware Delivery Path ECU Flashing Security: The Evidence Needed Before Production Shipping the Code That Security Rejected ECU Flashing Stations: Where Factory and Product Security Meet