Supplychain

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Marina Kovalchuk

Mar 25

Trivy Project Compromised by Malicious Supply Chain Attack: Enhanced CI/CD Security Measures Proposed

#cybersecurity #supplychain #cicd #malware

12 min read

Arkaprabha Banerjee

Mar 25

LiteLLM 1.82.7 and 1.82.8: Critical Security Compromise Exposed – How to Protect Your AI Projects

#security #artificialintelligen #python #supplychain

4 min read

Wu Long

Mar 24

When Your LLM Proxy Becomes the Attack Vector

#security #ai #python #supplychain

3 min read

Aiden Vaines

Mar 24

The Comforting Lie Of SHA Pinning

#thoughtleadership #security #supplychain #githubactions

5 min read

Alan West

Mar 25

How to Detect and Recover From a Compromised PyPI Package

#python #security #supplychain #pypi

5 min read

Kalyan Tamarapalli

Mar 23

The Attack Cost Escalation Model: Why Physical Security Changes Adversary Economics

#security #cybersecurity #devops #supplychain

3 min read

Gabriel Lima Ferreira

Mar 23

Ataque à Cadeia de Suprimentos: O Pacote NPM Que Pode Derrubar Sua Empresa

#supplychain #npm #devsecops #sca

2 min read

Ksenia Rudneva

Mar 22

Agent Skill Marketplace Vulnerable to Supply Chain Attacks: Standardized Security Scanning Proposed

#security #github #ai #supplychain

14 min read

Scott Sage

Mar 22

Add Real-Time Supply Chain Risk Data to Your AI Agent in 60 Seconds

#mcp #ai #supplychain #opensource

2 min read

Ksenia Rudneva

Mar 21

ONNX `silent=True` Disables Security Checks, Exposing ML Models to Supply Chain Attacks: Solution Needed

#onnx #security #machinelearning #supplychain

11 min read

Marina Kovalchuk

Mar 21

Trivy Vulnerability Scanner Compromised in Supply Chain Attack: Mitigation Steps and User Guidance

#cybersecurity #supplychain #opensource #vulnerability

8 min read

Pavel

Mar 20

Evidence Stores for Supply Chain Security

#tooling #security #supplychain #evidence

3 min read

Marina Kovalchuk

Mar 20

Trivy Scanner Compromised Again: Malicious Code Found in v0.69.4 and GitHub Actions, Raising Security Concerns

#security #supplychain #opensource #vulnerability

8 min read

ArkForge

Mar 16

Your AI Agent Has a Supply Chain. Nobody Is Auditing It.

#security #agents #supplychain #auditability

5 min read

Kunal

Mar 14

The Global Chip Supply Chain's Hidden Weakness Isn't Silicon. It's Helium.

#semiconductors #supplychain #geopolitics #manufacturing

6 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.

DEV Community

# supplychain

Trivy Project Compromised by Malicious Supply Chain Attack: Enhanced CI/CD Security Measures Proposed

LiteLLM 1.82.7 and 1.82.8: Critical Security Compromise Exposed – How to Protect Your AI Projects

When Your LLM Proxy Becomes the Attack Vector

The Comforting Lie Of SHA Pinning

How to Detect and Recover From a Compromised PyPI Package

The Attack Cost Escalation Model: Why Physical Security Changes Adversary Economics

Ataque à Cadeia de Suprimentos: O Pacote NPM Que Pode Derrubar Sua Empresa

Agent Skill Marketplace Vulnerable to Supply Chain Attacks: Standardized Security Scanning Proposed

Add Real-Time Supply Chain Risk Data to Your AI Agent in 60 Seconds

ONNX `silent=True` Disables Security Checks, Exposing ML Models to Supply Chain Attacks: Solution Needed

Trivy Vulnerability Scanner Compromised in Supply Chain Attack: Mitigation Steps and User Guidance

Evidence Stores for Supply Chain Security

Trivy Scanner Compromised Again: Malicious Code Found in v0.69.4 and GitHub Actions, Raising Security Concerns

Your AI Agent Has a Supply Chain. Nobody Is Auditing It.

The Global Chip Supply Chain's Hidden Weakness Isn't Silicon. It's Helium.