1.Pillow CVE-2026-112900: How to find and fix it with GitLabvulnerability | 2026-10-26 12:00 | CVE-2026-112900 | about.gitlab.com | Original ↗ | .md | #ai-security | #supply-chain | #gitlab
2.Node2Shell Evolves to HTTP2Shell: Google Brotli Flaw (CVE-2026-111497) Affects HTTP Ecosystemvulnerability | Critical | 2026-10-23 16:00 | CVE-2026-111497 | aikido.dev | Original ↗ | .md | #rce | #supply-chain | #aikido
3.“Are We Exposed?” What CISOs Need to Know About Their Software Riskblog | 2026-10-30 20:21 | jfrog.com | Original ↗ | .md | #supply-chain
4.JFrog Names Nine Global Winners for Inaugural Software Supply Chain Excellence Awardsblog | 2026-10-28 14:30 | jfrog.com | Original ↗ | .md | #ai-security | #supply-chain | #jfrog
5.LiteLLM Compromised, Steals Credentialsblog | 2026-10-21 13:44 | wiz.io | Original ↗ | .md | #ai-security | #cloud | #supply-chain
6.Scanning AI Assets: Catching What SCA and SAST Might Missblog | 2026-10-21 06:18 | jfrog.com | Original ↗ | .md | #ai-security | #supply-chain | #jfrog
7.LiteLLM compromised again: infostealer and RAT found in version 1.107.0blog | 2026-10-21 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #supply-chain | #incident-response
8.Supply Chain Zero Days: Closing the Gap Between Publication and Detectionblog | 2026-10-19 14:39 | wiz.io | Original ↗ | .md | #ai-security | #supply-chain | #zero-day
9.MyReport Updater: From gRPC to SYSTEMvulnerability | 2026-10-12 22:00 | CVE-2026-110632 | blog.quarkslab.com | Original ↗ | .md | #rce | #supply-chain | #git
10.Anthropic’s Free OSS Scanner: What It Means For Your Teamtool | 2026-10-16 19:49 | jfrog.com | Original ↗ | .md | #ai-security | #supply-chain | #jfrog
11.Pwning AI labs and the model supply chain through their own employeesresearch | 2026-10-15 00:30 | projectdiscovery.io | Original ↗ | .md | #ai-security | #bug-bounty | #supply-chain
12.Lessons from the SolarWinds Breach: A Discussion With CISO Tim Brownblog | 2026-10-16 16:30 | jfrog.com | Original ↗ | .md | #ai-security | #supply-chain | #interview
13.Package managers have an integrity problemblog | 2026-10-14 11:00 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #package-manager | #trailofbits
14.JFrog Business Value Center: Celebrate the ROI of Your Software Supply Chainblog | 2026-10-15 13:15 | jfrog.com | Original ↗ | .md | #supply-chain | #jfrog | #platform
15.More, Better, Faster: How we automate Metabase releasesblog | 2026-10-12 09:09 | metabase.com | Original ↗ | .md | #rce | #supply-chain | #ci-cd
16.How abliterated models can get you pwnedresearch | 2026-10-07 23:47 | projectdiscovery.io | Original ↗ | .md | #bug-bounty | #supply-chain | #prompt-injection
17.tensorlake NPM package compromised with Shai Hulud wormblog | 2026-10-08 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #supply-chain | #npm
18.Every artifact your teams ship, assembled right the first timeblog | 2026-10-06 00:00 | about.gitlab.com | Original ↗ | .md | #supply-chain | #gitlab | #devsecops
19.Dependency Firewall: Block risky packages before the buildblog | 2026-10-06 00:00 | about.gitlab.com | Original ↗ | .md | #supply-chain | #gitlab | #devsecops
20.simple-git Command Injection to Remote Code Execution PoC (CVE-2026-6951)vulnerability | High | 2026-09-28 08:48 | CVE-2026-6951 | github.com | Original ↗ | .md | #rce | #supply-chain | #poc
21.DeepSeek-Reasonix: How a poisoned config can hijack an AI coding agentblog | 2026-10-02 00:00 | about.gitlab.com | Original ↗ | .md | #ai-security | #supply-chain | #gitlab
22.The Year the Vulnerability Backlog Changed Shapeblog | 2026-10-02 19:11 | jfrog.com | Original ↗ | .md | #ai-security | #supply-chain | #vulnerability-management
23.VectorFreed: librsvg Use-After-Free (CVE-2026-96889) Leading to RCE in Next.js and Downstream Frameworksvulnerability | Critical | 2026-09-24 06:35 | CVE-2026-96889 | github.com | Original ↗ | .md | #rce | #supply-chain | #red-team
24.Securing the Kubernetes Supply Chain: Introducing WizOS Helm Chartsblog | 2026-09-30 15:52 | wiz.io | Original ↗ | .md | #supply-chain | #kubernetes | #container-security
25.Send GitLab an email, push to mainresearch | 2026-09-23 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #gitlab | #social-engineering
26.Novel supplychain.local Go worm appearsresearch | 2026-09-23 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #malware | #aikido
27.Graphalgo campaign spreads to Terraform providers and Go Modulesresearch | 2026-09-22 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #web3 | #go
28.Securing the software factory at machine speedblog | 2026-09-18 00:00 | about.gitlab.com | Original ↗ | .md | #ai-security | #supply-chain | #agentic-ai
29.PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Huntingresearch | 2026-09-15 00:00 | crowdstrike.com | Original ↗ | .md | #ai-security | #bug-bounty | #supply-chain
30.Hacking OpenAIblog | 2026-09-13 00:00 | hacktron.ai | Original ↗ | .md | #supply-chain | #vulnerability-research | #openai