Curated security research, vulnerabilities, advisories and tools for practitioners.

#supply-chain

Security coverage tagged supply-chain. (Page 6)

151.

Breaking AppSec Myths – Obfuscated Packages

research | 2026-02-04 14:16 | jfrog.com | original ↗ | #supply-chain | #appsec | #obfuscation

152.

Introducing Aikido Package Health: a Better Way to Trust Your Dependencies

blog | 2026-02-03 00:00 | aikido.dev | original ↗ | #supply-chain | #devsecops | #open-source

153.

Giving OpenClaw The Keys to Your Kingdom? Read This First

blog | 2026-02-02 14:16 | jfrog.com | original ↗ | #ai-security | #supply-chain | #prompt-injection

154.

Celebrating our 2025 open-source contributions

blog | 2026-01-30 12:00 | blog.trailofbits.com | original ↗ | #supply-chain | #open-source | #rust

155.

Building cryptographic agility into Sigstore

blog | 2026-01-29 12:00 | blog.trailofbits.com | original ↗ | #supply-chain | #open-source | #cryptography

156.

The Year in Wiz Research: 2025 Most Read Blogs

blog | 2026-01-30 13:00 | wiz.io | original ↗ | #ai-security | #cloud | #supply-chain

157.

How We Found 5 Ways to Hack Any Developer Using Google Gemini CLI

research | 2026-01-27 00:00 | bugbunny.ai | original ↗ | #ai-security | #cloud | #rce

158.

Introducing SITF: The First Threat Framework Dedicated to SDLC Infrastructure

blog | 2026-01-26 17:25 | wiz.io | original ↗ | #supply-chain | #devsecops | #ci-cd

159.

The 282% ROI of Unified Security

blog | 2026-01-21 13:00 | jfrog.com | original ↗ | #supply-chain | #appsec | #jfrog

160.

Understanding Open-Source License Risk in Modern Software

blog | 2026-01-19 00:00 | aikido.dev | original ↗ | #supply-chain | #devsecops | #open-source

161.

CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild

blog | 2026-01-15 15:00 | wiz.io | original ↗ | #cloud | #supply-chain | #aws

162.

JFrog Achieves AWS Security Competency

blog | 2026-01-14 11:54 | jfrog.com | original ↗ | #cloud | #supply-chain | #cloud-security

163.

SAST vs SCA: Securing the Code You Write and the Code You Depend On

blog | 2026-01-06 00:00 | aikido.dev | original ↗ | #supply-chain | #appsec | #vulnerability-management

164.

2026: Trust Is the Currency, Platforms Are the Standard, and Vendors Must Justify Their Seat at the Table

blog | 2026-01-01 09:45 | jfrog.com | original ↗ | #ai-security | #supply-chain | #jfrog

165.

Why Enterprise and Fortune 500 Companies are Leaving Snyk and Checkmarx for JFrog

blog | 2025-12-31 19:30 | jfrog.com | original ↗ | #supply-chain | #appsec | #jfrog

166.

JFrog vs Checkmarx: An AppSec Solution Comparison

blog | 2025-12-31 15:24 | jfrog.com | original ↗ | #ai-security | #supply-chain | #appsec

167.

Supply Chain Attack - How Attackers Weaponize Software Supply Chains

incident | 2025-12-26 00:00 | netlas.io | original ↗ | #supply-chain | #open-source | #incident-response

168.

Snipping the Long Tail of Shai-Hulud 2.0

blog | 2025-12-30 15:21 | wiz.io | original ↗ | #cloud | #supply-chain | #npm

169.

JFrog vs Snyk: Why Effective AppSec Must Move Beyond Source Code

blog | 2025-12-30 15:13 | jfrog.com | original ↗ | #supply-chain | #appsec | #jfrog

170.

Docker Hardened Images are Free: Scale Their Adoption with JFrog

blog | 2025-12-29 14:32 | jfrog.com | original ↗ | #supply-chain | #container-security | #jfrog

171.

swampUP Europe 2025 Recap

blog | 2025-12-23 16:23 | jfrog.com | original ↗ | #ai-security | #supply-chain | #jfrog

172.

The Breach You Didn’t Expect: Your AppSec Stack

blog | 2025-12-22 18:52 | jfrog.com | original ↗ | #supply-chain | #appsec | #devsecops

173.

Inside DPRK Operations: New Lazarus and Kimsuky Infrastructure Uncovered Across Global Campaigns

research | 2025-12-17 00:00 | hunt.io | original ↗ | #supply-chain | #threat-intelligence | #malware

174.

Catching malicious package releases using a transparency log

blog | 2025-12-12 12:00 | blog.trailofbits.com | original ↗ | #supply-chain | #threat-detection | #sigstore

175.

OWASP Top 10 for Agentic Applications (2026): What Developers and Security Teams Need to Know

blog | 2025-12-10 00:00 | aikido.dev | original ↗ | #ai-security | #supply-chain | #agentic-ai

176.

Code to Cloud Attacks: From Github PAT to Cloud Control Plane

blog | 2025-12-09 13:00 | wiz.io | original ↗ | #cloud | #supply-chain | #cloud-security

177.

Our Approach to Coordinated Vulnerability Disclosure

blog | 2025-12-05 00:00 | depthfirst.com | original ↗ | #supply-chain | #vulnerability-research | #vulnerability-disclosure

178.

Shai-Hulud 2.0 Aftermath: Trends, Victimology and Impact

incident | 2025-12-01 17:52 | wiz.io | original ↗ | #supply-chain | #incident-response | #npm

179.

PyTorch Users at Risk: Unveiling 3 Zero-Day PickleScan Vulnerabilities

vulnerability | 2025-12-02 14:26 | jfrog.com | original ↗ | #ai-security | #supply-chain | #zero-day

180.

How to Comply With the UK Cybersecurity & Resilience Bill: A Practical Guide for Modern Engineering Teams

blog | 2025-12-03 00:00 | aikido.dev | original ↗ | #supply-chain | #vulnerability-management | #devsecops

← Previous More →