{
  "node_id": "mitre-capec-capec-669-alteration-of-a-software-update",
  "title": "MITRE CAPEC-669: Alteration of a Software Update (Standard Attack Pattern - High Severity)",
  "domain": "Cybersecurity",
  "version": "1.0.0",
  "last_updated": "2026-05-25",
  "bluf": "MITRE CAPEC-669 (Alteration of a Software Update) is a standard-level attack pattern in the MITRE Common Attack Pattern Enumeration and Classification. An adversary with access to an organization's software update infrastructure inserts malware into the content of an outgoing update to fielded systems where a wide range of malicious effects are possible. With the same level of access, the adversary can alter a software update to perform specific malicious acts including granting the adversary control over the software's normal functionality. Likelihood of attack: Medium. Typical severity: High. Relates to MITRE ATT&CK T1195.002.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "nist_framework",
      "iso_standard",
      "industry_mapping",
      "mitre_attack"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "nist-sp-800-53-r5",
    "iso-27001-2022",
    "cis-controls-v8",
    "owasp-asvs-l2",
    "mitre-attack-t1195-supply-chain-compromise"
  ],
  "primary_citations_count": 8
}