Introducing SITF: The First Threat Framework Dedicated to SDLC Infrastructure
Summary
Wiz introduces SITF, an open threat framework for SDLC infrastructure mapping attacks across endpoint/IDE, VCS, CI/CD, registry and production, with 70+ techniques and risk-to-control causal chains.
- Published
- Collected
--- id: 6912 title: "Introducing SITF: The First Threat Framework Dedicated to SDLC Infrastructure" source_domain: wiz.io source_url: "https://www.wiz.io/blog/sitf-sdlc-threat-framework" published_at: "2026-01-26T17:25:25Z" tags: ["supply-chain", "devsecops", "ci-cd", "sdlc", "sitf", "threat-framework"] phying_url: "https://phying.com/item/6912" lang: en --- # Introducing SITF: The First Threat Framework Dedicated to SDLC Infrastructure ## Summary Wiz introduces SITF, an open threat framework for SDLC infrastructure mapping attacks across endpoint/IDE, VCS, CI/CD, registry and production, with 70+ techniques and risk-to-control causal chains. ## Intelligence Metadata - **Sources:** wiz.io - **Published:** 2026-01-26T17:25:25Z - **Original:** https://www.wiz.io/blog/sitf-sdlc-threat-framework - **Phying News:** https://phying.com/item/6912