31.Compromised Flutter package on pub.dev contains XCSSET malwareblog | 2026-09-08 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #malware | #macos
32.Shai-Hulud Rises From the Dead after 111 daysblog | 2026-09-07 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #malware | #npm
33.CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacksincident | 2026-09-02 00:00 | crowdstrike.com | Original ↗ | .md | #supply-chain | #open-source | #endpoint-security
34.Extending the Single Source of Truth to the Agentic Software Supply Chainblog | 2026-09-02 14:52 | jfrog.com | Original ↗ | .md | #ai-security | #supply-chain | #jfrog
35.Live From the Show Floor: swampUP 2026blog | 2026-09-02 12:15 | jfrog.com | Original ↗ | .md | #ai-security | #supply-chain | #conference
36.DevGovOps: How the AI Era Dictates That Governance Lives inside the Pipelineblog | 2026-09-02 11:56 | jfrog.com | Original ↗ | .md | #ai-security | #supply-chain | #compliance
37.Every New Compliance Framework Restarts the Same Fire Drill. It Doesn’t Have To.blog | 2026-09-02 11:55 | jfrog.com | Original ↗ | .md | #supply-chain | #compliance | #jfrog
38.Popular code generator for TanStack Query hit by supply chain wormincident | 2026-08-28 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #threat-intelligence | #malware
39.OEMpocalypse Now: A Generic Exploitation Strategy from Android untrusted app to rootresearch | 2026-08-31 00:00 | calif.io | Original ↗ | .md | #supply-chain | #vulnerability-research | #android
40.The dark figure of supply chain detectionblog | 2026-09-01 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #detection-engineering | #security-research
41.Introducing JFrog Preview: Getting New Capabilities Into Your Hands, Fasterblog | 2026-08-28 13:12 | jfrog.com | Original ↗ | .md | #supply-chain | #appsec | #devops
42.Version Control DFIR: a Cheatsheet to GitHub, GitLab, Bitbucket, and Azure DevOpsblog | 2026-08-27 12:00 | wiz.io | Original ↗ | .md | #cloud | #supply-chain | #gitlab
43.Good riddance, TeamPCP. Now for the hard part.blog | 2026-08-27 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #threat-intelligence | #malware
44.Securing the Australian Government Software Supply Chain: JFrog Completes Protected Level IRAP Assessmentblog | 2026-08-27 01:30 | jfrog.com | Original ↗ | .md | #supply-chain | #compliance | #security-audit
45.Git was built for humans — agents need an upgradeblog | 2026-08-26 00:00 | about.gitlab.com | Original ↗ | .md | #ai-security | #supply-chain | #git
46.Software supply chain security requires decisions rather than defaultsblog | 2026-08-26 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #appsec | #dependency-management
47.CTEM for Enterprise: Scaling Continuous Exposure Management Across Complex Environmentsblog | 2026-08-24 17:00 | hackerone.com | Original ↗ | .md | #ai-security | #bug-bounty | #cloud
48.Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaignsincident | 2026-08-20 15:56 | wiz.io | Original ↗ | .md | #supply-chain | #malware | #rust
49.Coding Agents Just Reopened Your Software Supply Chain Blind Spotblog | 2026-08-25 12:36 | jfrog.com | Original ↗ | .md | #ai-security | #supply-chain | #npm
50.Two popular Rust crates arrayref and append-only-vec compromised in Supply Chain Attackincident | 2026-08-20 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #threat-intelligence | #rust
51.Critical remote code execution in Serena, a popular MCP coding agentvulnerability | Critical | 2026-08-17 00:00 | about.gitlab.com | Original ↗ | .md | #rce | #supply-chain | #gitlab
52.Introducing JFrog Platform Federation: One Control Plane for Synchronizing Every Site in Your Software Supply Chainblog | 2026-08-24 15:30 | jfrog.com | Original ↗ | .md | #supply-chain | #devops | #jfrog
53.Why Self-Healing Is the Only Way to Secure at Frontier AI Speedblog | 2026-08-24 12:58 | jfrog.com | Original ↗ | .md | #ai-security | #supply-chain | #appsec
54.Shai-Hulud was the best thing to happen to supply chain securityblog | 2026-08-24 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #npm | #aikido
55.Supply Chain Security Analysis of a 9.5M-Install VS Code Extensionvulnerability | 2026-08-16 13:08 | projectdiscovery.io | Original ↗ | .md | #bug-bounty | #supply-chain | #xss
56.Stealing the Artifact – JFrog Artifactory Vulnerabilityblog | 2026-08-14 00:00 | netspi.com | Original ↗ | .md | #supply-chain | #vulnerability-research | #jfrog
57.Closing the Blind Spot: Securing Personal Repositories in the Software Supply Chainblog | 2026-08-13 13:48 | wiz.io | Original ↗ | .md | #ai-security | #supply-chain | #appsec
58.Inside the ECB’s AI Cyber Directive: What EU Banks Need to Knowblog | 2026-08-13 10:52 | jfrog.com | Original ↗ | .md | #ai-security | #supply-chain | #jfrog
59.From DEF CON Research to Automated Supply Chain Defense, finding npx confusion vulnerabilities with npxconfuseresearch | 2026-08-11 00:00 | lab.ctbb.show | Original ↗ | .md | #rce | #supply-chain | #zero-day
60.JFrog Artifactory Now Integrates Natively with Artifact Registry in Google Cloudblog | 2026-08-12 13:33 | jfrog.com | Original ↗ | .md | #cloud | #supply-chain | #jfrog