Supplychain - DEV Community

Skip to content

DEV Community

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Oleg

Sep 22

The Ghost in the Machine: Unraveling Persistent Git Compromises Beyond Your Control

#security #github #devops #supplychain

5 min read

kozhevniko

Sep 21

The Artifactory Token Chain: Why Build Repositories Are a Credential Store

#supplychain #artifactrepository #authenticationbypass #devsecops

4 min read

Sep 21

700 Agents, 25 Actions Each, and Nothing Fired

#supplychain #secrets #aiagents

3 min read

jeffrey

Sep 20

The Artifact Repository Is a Trust Root: Reading the JFrog Artifactory Authentication Bypass

#supplychain #devops #authentication #artifactrepository

4 min read

yutianle

Sep 20

The Shai-Hulud npm worm showed that opening a folder is enough to run code

#supplychain #npm #developertooling #credentialtheft

3 min read

kozhevniko

Sep 20

Print Servers and Artifact Repositories: Measuring Two Overlooked Attack Surfaces

#security #zoomeye #exposure #supplychain

3 min read

jeffrey

Sep 20

One Console, Every Customer: What the N-able N-central Pre-Authentication RCE Says About RMM Concentration Risk

#vulnerabilitymanagement #msp #rmm #supplychain

3 min read

yutianle

Sep 20

The Default Join Key That Let Attackers Mint Admin Tokens on JFrog Artifactory

#supplychain #authenticationbypass #artifactory #cve202682329

4 min read

lyee blair

Sep 20

From Warehouses to Algorithms: How JD Logistics Builds a Technology-Driven Supply Chain

#jdlogistics #jingdong #supplychain #ai

7 min read

Sep 19

Your coding agent installed 23 packages in a minute. Your SBOM saw zero.

#supplychain #aiagents

3 min read

jeffrey

Sep 17

Your Coding Agent Reads the Repository Before You Do: Configuration Injection in AI Developer Tooling

#aisecurity #supplychain #developertooling #appsec

3 min read

Sep 18

Two encrypted emails in twenty years

#opensource #security #signing #supplychain

5 min read

jeffrey

Sep 17

Artifactory on the Internet: Measuring the Exposure Behind CVE-2026-82329

#zoomeye #exposuremanagement #supplychain #artifactory

4 min read

kozhevniko

Sep 17

Jenkins Controller Compromise Is a Supply Chain Event: Lessons from 20 Plugin Flaws

#security #jenkins #supplychain #cicd

4 min read

kozhevniko

Sep 17

Self-Hosted CI Runners Are Shared Secrets: Threat Modelling Your Build Infrastructure

#cicd #supplychain #devops #runnersecurity

3 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.