Supplychain

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Roman Dubrovin

Mar 26

Securing Python Package Management: Strategies to Mitigate Supply Chain Attacks and Ensure Dependency Integrity

#python #security #supplychain #dependencies

12 min read

0xAllenDev

Mar 26

How .pth Files Became a Supply Chain Weapon (and How to Detect Them)

#python #security #supplychain #opensource

1 min read

Alina Trofimova

Mar 26

Trivy Supply Chain Compromised: Malicious Release and Force-Pushed Tags Lead to Credential Theft and Artifact Propagation

#trivy #supplychain #cicd #security

15 min read

Arkaprabha Banerjee

Mar 25

LiteLLM 1.82.7 and 1.82.8: Critical Security Compromise Exposed – How to Protect Your AI Projects

#security #artificialintelligen #python #supplychain

4 min read

Wu Long

Mar 24

When Your LLM Proxy Becomes the Attack Vector

#security #ai #python #supplychain

3 min read

Cover image for How to Detect and Recover From a Compromised PyPI Package

Alan West

Mar 25

How to Detect and Recover From a Compromised PyPI Package

#python #security #supplychain #pypi

5 min read

Kalyan Tamarapalli

Mar 23

The Attack Cost Escalation Model: Why Physical Security Changes Adversary Economics

#security #cybersecurity #devops #supplychain

3 min read

Cover image for Ataque à Cadeia de Suprimentos: O Pacote NPM Que Pode Derrubar Sua Empresa

Gabriel Lima Ferreira

Mar 23

Ataque à Cadeia de Suprimentos: O Pacote NPM Que Pode Derrubar Sua Empresa

#supplychain #npm #devsecops #sca

2 min read

Ksenia Rudneva

Mar 22

Agent Skill Marketplace Vulnerable to Supply Chain Attacks: Standardized Security Scanning Proposed

#security #github #ai #supplychain

14 min read

Cover image for Add Real-Time Supply Chain Risk Data to Your AI Agent in 60 Seconds

Scott Sage

Mar 22

Add Real-Time Supply Chain Risk Data to Your AI Agent in 60 Seconds

#mcp #ai #supplychain #opensource

2 min read

Ksenia Rudneva

Mar 21

ONNX `silent=True` Disables Security Checks, Exposing ML Models to Supply Chain Attacks: Solution Needed

#onnx #security #machinelearning #supplychain

11 min read

Marina Kovalchuk

Mar 21

Trivy Vulnerability Scanner Compromised in Supply Chain Attack: Mitigation Steps and User Guidance

#cybersecurity #supplychain #opensource #vulnerability

8 min read

Marina Kovalchuk

Mar 25

Trivy Project Compromised by Malicious Supply Chain Attack: Enhanced CI/CD Security Measures Proposed

#cybersecurity #supplychain #cicd #malware

12 min read

Cover image for Evidence Stores for Supply Chain Security

Pavel

Mar 20

Evidence Stores for Supply Chain Security

#tooling #security #supplychain #evidence

3 min read

Marina Kovalchuk

Mar 20

Trivy Scanner Compromised Again: Malicious Code Found in v0.69.4 and GitHub Actions, Raising Security Concerns

#security #supplychain #opensource #vulnerability

8 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Forem

# supplychain

Securing Python Package Management: Strategies to Mitigate Supply Chain Attacks and Ensure Dependency Integrity

How .pth Files Became a Supply Chain Weapon (and How to Detect Them)

Trivy Supply Chain Compromised: Malicious Release and Force-Pushed Tags Lead to Credential Theft and Artifact Propagation

LiteLLM 1.82.7 and 1.82.8: Critical Security Compromise Exposed – How to Protect Your AI Projects

When Your LLM Proxy Becomes the Attack Vector

How to Detect and Recover From a Compromised PyPI Package

The Attack Cost Escalation Model: Why Physical Security Changes Adversary Economics

Ataque à Cadeia de Suprimentos: O Pacote NPM Que Pode Derrubar Sua Empresa

Agent Skill Marketplace Vulnerable to Supply Chain Attacks: Standardized Security Scanning Proposed

Add Real-Time Supply Chain Risk Data to Your AI Agent in 60 Seconds

ONNX `silent=True` Disables Security Checks, Exposing ML Models to Supply Chain Attacks: Solution Needed

Trivy Vulnerability Scanner Compromised in Supply Chain Attack: Mitigation Steps and User Guidance

Trivy Project Compromised by Malicious Supply Chain Attack: Enhanced CI/CD Security Measures Proposed

Evidence Stores for Supply Chain Security

Trivy Scanner Compromised Again: Malicious Code Found in v0.69.4 and GitHub Actions, Raising Security Concerns