Tag: supply-chain
All the articles with the tag "supply-chain".
-
[AUTO] NPM Supply Chain Trojan Commodifies Post-Exploitation With Embedded LLM C2
14 trojanized npm packages deliver RedC2 4.0, a Linux backdoor with LLM-assisted command layer
-
[AUTO] Agent Skills Are Under Active Attack
OWASP releases security framework for agent skills after documenting widespread exploitation
-
Weekly Roundup: Grok twice, Siemens PLCs, and a panic op-ed
Nineteen posts in ten days: two Grok injection disclosures, AI-generated exploits hitting Siemens S7 controllers, and The Atlantic's panic piece resting on a breach OpenAI describes more narrowly.
-
[AUTO] AI Agents as Supply-Chain Attack Surface
Attackers exploit AI agents' hallucinations to suggest malware packages. Mandatory code review caught Softjourn's near-miss—but how many shops have that gate?