61.keyv and cacheable npm Package Hijacked in Supply Chain Attackincident | 2026-08-04 11:25 | wiz.io | Original ↗ | .md | #ai-security | #supply-chain | #malware
62.Keyv and friends compromised in active Shai-Hulud supply chain attackincident | 2026-08-04 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #incident-response | #malware
63.Behind the GitLab RCE: A depthfirst Journey into the Ruby Ecosystemresearch | 2026-07-27 12:00 | depthfirst.com | Original ↗ | .md | #rce | #supply-chain | #featured
64.Turning Enterprise Update Servers Into Backdoor Factories (0_o) – Part 1research | 2026-08-05 17:15 | specterops.io | Original ↗ | .md | #supply-chain | #windows-security | #wsus
65.Cloud Threat Highlights: H1 2026blog | 2026-08-06 14:03 | wiz.io | Original ↗ | .md | #ai-security | #cloud | #supply-chain
66.The Secret Sauce of SLSA: DevGovOps at the Speed of Agentic AIblog | 2026-08-05 13:15 | jfrog.com | Original ↗ | .md | #ai-security | #supply-chain | #compliance
67.swampUP 2026 Preview: The Trust Layer for the Agentic Software Supply Chainblog | 2026-08-04 19:02 | jfrog.com | Original ↗ | .md | #ai-security | #supply-chain | #agentic-ai
68.Introducing the Wiz Sensor for Developer Workstations to Protect Endpoints in the AI Erablog | 2026-08-03 14:02 | wiz.io | Original ↗ | .md | #ai-security | #cloud | #supply-chain
69.SleeperGem: RubyGems supply chain attack targets dormant maintainer accountsincident | 2026-07-19 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #featured | #ruby
70.Anthropic's Fever Dream: Claude's package that stole real keysblog | 2026-07-31 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #supply-chain | #agentic-ai
71.Denying the Worm: Detecting SANDWORM_MODE and the Emerging Class of AI Toolchain Supply Chain Attacksresearch | 2026-07-21 00:00 | crowdstrike.com | Original ↗ | .md | #ai-security | #supply-chain | #featured
72.Fast Remediation Is the New Trust Model: JFrog and OpenAI Collaboration on Zero-Day Security Findingsblog | 2026-07-27 21:30 | jfrog.com | Original ↗ | .md | #ai-security | #supply-chain | #zero-day
73.AsyncAPI npm packages backdoored via GitHub Actionsincident | 2026-07-14 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #featured | #incident-response
74.AI lectures with Dr. Brumley Part 2 | The anatomy of a modern AI systemblog | 2026-07-23 12:00 | bugcrowd.com | Original ↗ | .md | #ai-security | #supply-chain | #ai-safety
75.The Perfect Heist: NuGet Typosquat Targets Betting Platform to Rig Resultsresearch | 2026-07-21 13:16 | jfrog.com | Original ↗ | .md | #supply-chain | #typosquatting | #dotnet
76.Compromised @injectivelabs/sdk-ts exfiltrates wallet keys through fake telemetryincident | 2026-07-09 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #web3 | #featured
77.Tyro's CISO: Being the "Einstein of cybersecurity" isn't enough if developers don't trust youblog | 2026-07-21 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #appsec | #developer-security
78.The System of Record for Every AI Asset in Your Dell AI Factoryblog | 2026-07-20 17:15 | jfrog.com | Original ↗ | .md | #ai-security | #supply-chain | #jfrog
79.The upgrade trap: when upgrading is the wrong answer to a CVEblog | 2026-07-20 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #vulnerability-management | #open-source
80.M-Red-Team: AsyncAPI Supply Chain Compromise via GitHub Actionsincident | 2026-07-14 10:33 | wiz.io | Original ↗ | .md | #supply-chain | #malware | #github-actions
81.When a version bump breaks your build, GitLab fixes itblog | 2026-07-16 00:00 | about.gitlab.com | Original ↗ | .md | #ai-security | #supply-chain | #gitlab
82.Don’t eat the ChocoPoCs! How vulnerability researchers were repeatedly targeted by trojanised exploitsincident | 2026-07-01 11:35 | yeswehack.com | Original ↗ | .md | #supply-chain | #featured | #vulnerability-research
83.How Aikido Intel detects malware and vulnerabilities firstblog | 2026-07-14 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #supply-chain | #open-source
84.The practical checklist for defending against supply chain attacksblog | 2026-07-14 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #appsec | #incident-response
85.Web2 Bugs Hiding in Web3: The Smart Contract Security Blind Spotblog | 2026-07-10 09:55 | hackenproof.com | Original ↗ | .md | #supply-chain | #web3 | #vulnerability-research
86.Secure AI Workflows: The Identity and Access Management (IAM) Checklistblog | 2026-07-08 14:03 | jfrog.com | Original ↗ | .md | #ai-security | #supply-chain | #mcp
87.And another one. GitHub ships break-glass credential revocationblog | 2026-07-01 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #incident-response | #credential-security
88.Start Secure in the AI Era: Accelerating AI Threat Readiness with WizOSblog | 2026-06-30 17:50 | wiz.io | Original ↗ | .md | #ai-security | #supply-chain | #container-security
89.Aikido acquires Root to secure the supply chainblog | 2026-06-30 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #vulnerability-management | #open-source
90.Open Source Vulnerability Management: Fixing Dependency Risk Without Alert Fatigueblog | 2026-06-28 07:00 | bugbunny.ai | Original ↗ | .md | #supply-chain | #vulnerability-management | #open-source