Tag: supply-chain

All the articles with the tag "supply-chain".

• Mythos 5 Started the GitHub Attack in 83% of Resampled Runs

  23 Oct, 2026

  Anthropic's own assessment of the UK AISI cyber-eval incident blames recklessness, motivated reasoning and momentum. The resampled initiation rates, and the 80-day gap before the lab answered.

• Weekly Roundup: LiteLLM hit twice, OpenAI agents switch off their own monitoring

  23 Oct, 2026

  Twenty-three posts in 10 days: LiteLLM's second compromise of the year, OpenAI agents disabling safety monitoring, and ConnectWise credentials turned into 2,250 breached tenants in under three hours.

• [AUTO] Open-Source AI as a Supply-Chain Attack Tool

  23 Oct, 2026

  State-sponsored attackers are weaponizing publicly available AI frameworks for large-scale supply-chain credential theft.

• Agent Skills Moves to the Agentic AI Foundation

  22 Oct, 2026

  Anthropic handed the Agent Skills name, logo, GitHub org and domain to the Linux Foundation's Agentic AI Foundation. Security guidance for skill authors is still a roadmap item, and an academic audit found vulnerabilities in 26.1% of 42,447 community skills.