Tag: supply-chain
All the articles with the tag "supply-chain".
-
[AUTO] AI Agents Skip SHA Verification in Git Checkouts
SHA pinning fails when AI agents skip verification, leaving code supply chains exposed.
-
[AUTO] PhantomRaven: Stealing Secrets for Bug Bounties
A threat actor uses LLM-written malware to harvest CI/CD secrets, then reports the vulnerabilities for rewards instead of selling the access.
-
[AUTO] Plugin4Shell breaks AI agent supply chains
A zero-click RCE in top AI coding agents exploits a fundamental flaw in how they verify code commits.
-
[AUTO] AI Assistant Hijack Weaponizes Supply Chain Worm
Hijacked AI assistant sessions become a deployment vector for supply chain worms, not just a data access risk.