U.S. Cybersecurity and Infrastructure Security Agency · Pledge goals (2024)
CISA Secure by Design Pledge: real-world incidents for each item
Several pledge goals target failure classes that appear again and again in public incidents: single-factor access, unpatched components and missing evidence of intrusion.
Official CISA Secure by Design- Goal 1
Multi-factor authentication
Measurably increase the use of MFA across products.
- Self-replicating "Shai-Hulud" worm compromises more than 500 npm packages by stealing developer tokens (2025)2025
- GitHub Actions injection leaks Nx's npm token; malicious packages use local AI coding tools to hunt for secrets (2025)2025
- Stolen OAuth tokens from the Salesloft Drift integration are used to export data from customers' Salesforce instances (2025)2025
- Malicious code committed to the Amazon Q Developer VS Code extension via a compromised token (AWS, 2025)2025
- "ToolShell" vulnerabilities in on-premises SharePoint are exploited to steal server keys (2025)2025
- Default password and an IDOR in McDonald's AI hiring chatbot platform expose data on 64 million applicants (2025)2025
and 2 more in the linked patterns.
- Goal 2
Default passwords
Measurably reduce default passwords across products.
- Self-replicating "Shai-Hulud" worm compromises more than 500 npm packages by stealing developer tokens (2025)2025
- GitHub Actions injection leaks Nx's npm token; malicious packages use local AI coding tools to hunt for secrets (2025)2025
- Stolen OAuth tokens from the Salesloft Drift integration are used to export data from customers' Salesforce instances (2025)2025
- Malicious code committed to the Amazon Q Developer VS Code extension via a compromised token (AWS, 2025)2025
- "ToolShell" vulnerabilities in on-premises SharePoint are exploited to steal server keys (2025)2025
- Default password and an IDOR in McDonald's AI hiring chatbot platform expose data on 64 million applicants (2025)2025
and 2 more in the linked patterns.
- Goal 3
Reducing entire classes of vulnerability
Measurably reduce the prevalence of one or more vulnerability classes.
- Cross-tenant access through a caller-controlled identifier
- Indirect prompt injection changes agent behavior
- Non-secret app ID lets anyone register for private apps built on the Base44 AI app builder (2025)2025
- Default password and an IDOR in McDonald's AI hiring chatbot platform expose data on 64 million applicants (2025)2025
- Privilege escalation and a certificate-validation flaw allow cross-account database access (Azure PostgreSQL "ExtraReplica", 2022)2022
- Missing access checks in a document portal expose over 800 million First American images (2019)2019
- Prompt injection makes GitHub Copilot turn off its own confirmations and run commands (CVE-2025-53773)2025
- Prompt injection in a README plus weak allow-list matching lets Gemini CLI silently run attacker commands (2025)2025
and 3 more in the linked patterns.
- Goal 4
Security patches
Measurably increase customers' installation of security patches.
- "ToolShell" vulnerabilities in on-premises SharePoint are exploited to steal server keys (2025)2025
- SQL injection in MOVEit Transfer exploited by the CL0P ransomware gang (2023)2023
- Log4Shell: remote code execution through JNDI lookups in Apache Log4j (2021)2021
- Capital One cloud breach and an $80 million OCC penalty for weak cloud-migration risk assessment (2019)2019
- Missing access checks in a document portal expose over 800 million First American images (2019)2019
- Access to the Starwood reservation network since 2014 exposes Marriott guest records (2018)2018
and 2 more in the linked patterns.
- Goal 5
Vulnerability disclosure policy
Publish a vulnerability disclosure policy.
No documented incident in the corpus yet.
- Goal 6
CVEs
Be transparent in vulnerability reporting, including root-cause (CWE) fields.
No documented incident in the corpus yet.
- Goal 7
Evidence of intrusions
Measurably improve customers' ability to gather evidence of intrusions, such as logs.
- Call and text records of nearly all AT&T wireless customers taken from a third-party cloud workspace (2024)2024
- Stolen credential opens Okta's support system, where uploaded HAR files held customer session tokens (2023)2023
- GitHub's RSA SSH host private key briefly exposed in a public repository (2023)2023
- Malware steals an engineer's SSO session and exposes CircleCI customer secrets (2023)2023
- Phishing impersonating a CI vendor yields GitHub credentials and 130 source-code repositories (Dropbox, 2022)2022
- SMS phishing of employees leads to compromise of Twilio customer accounts (2022)2022
and 2 more in the linked patterns.
Mappings are CollectSEA's own analysis and are not produced or endorsed by U.S. Cybersecurity and Infrastructure Security Agency. Item names and summaries paraphrase the official text; consult the source for the authoritative wording.