Think Outside the Prompt: Creative Approaches to Attacking AI

Software supply chain attacks in 2023 cluster into three categories: package manager attacks like dependency confusion and typosquatting, developer compromise, and breaches at large software vendors.

NetSPI experts predict nine 2023 trends: machine learning security, DLT to mitigate supply chain attacks, continuous pentesting, cyber insurance growth, and blockchain adoption by major banks.

Go malware has appeared in two Terraform providers and two Go modules — the first observed abuse of Terraform providers. The Graphalgo Go port hides a hash-gated trigger with blockchain and Slack C2.

With the rapid adoption of AI-enabled services into production applications, it’s important that organizations are able to secure the AI/ML components coming into their software supply chain. The good news is that even if you don’t have a tool specifically for scanning models themselves, you can still apply the same DevSecOps best practices to securing…

NetSPI chained four JFrog Artifactory vulnerabilities, including CVE-2026-42018 and CVE-2026-69107, to bypass authentication entirely and retrieve arbitrary artifacts as an unauthenticated attacker.

The FCC added foreign-made consumer routers to its Covered List over backdoor concerns: new models need Conditional Approval while a waiver protects existing devices until March 1, 2027.