Curated security research, vulnerabilities, advisories and tools for practitioners.

#supply-chain

Security coverage tagged supply-chain. (Page 7)

181.

The Tide of AI – Surfing the Tsunami of Binaries

blog | 2026-03-02 17:12 | jfrog.com | Original ↗ | .md | #ai-security | #supply-chain | #jfrog

182.

NIS2 Compliance in 2026: Compliance Doesn’t Have to Mean Complexity

blog | 2026-03-02 10:53 | jfrog.com | Original ↗ | .md | #ai-security | #rce | #supply-chain

183.

JFrog Takes Software Resilience to the Next Level with 99.99% Uptime SLA

blog | 2026-02-24 14:14 | jfrog.com | Original ↗ | .md | #ai-security | #supply-chain | #devops

184.

From Prompt to Production: The New AI Software Supply Chain Security

blog | 2026-02-23 11:55 | jfrog.com | Original ↗ | .md | #ai-security | #rce | #supply-chain

185.

AI & Security Risks: Reviewing Governance and Guardrails

blog | 2026-02-19 00:00 | bishopfox.com | Original ↗ | .md | #ai-security | #supply-chain | #ai-governance

186.

Fake Homebrew Pages Deliver Cuckoo Stealer via ClickFix | macOS Threat Hunting Analysis

research | 2026-02-17 00:00 | hunt.io | Original ↗ | .md | #supply-chain | #malware | #threat-hunting

187.

Breaking AppSec Myths – Obfuscated Packages

research | 2026-02-04 14:16 | jfrog.com | Original ↗ | .md | #supply-chain | #appsec | #obfuscation

188.

Introducing Aikido Package Health: a Better Way to Trust Your Dependencies

blog | 2026-02-03 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #devsecops | #open-source

189.

Giving OpenClaw The Keys to Your Kingdom? Read This First

blog | 2026-02-02 14:16 | jfrog.com | Original ↗ | .md | #ai-security | #supply-chain | #prompt-injection

190.

Celebrating our 2025 open-source contributions

blog | 2026-01-30 12:00 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #open-source | #rust

191.

Building cryptographic agility into Sigstore

blog | 2026-01-29 12:00 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #open-source | #cryptography

192.

The Year in Wiz Research: 2025 Most Read Blogs

blog | 2026-01-30 13:00 | wiz.io | Original ↗ | .md | #ai-security | #cloud | #supply-chain

193.

How We Found 5 Ways to Hack Any Developer Using Google Gemini CLI

research | 2026-01-27 00:00 | bugbunny.ai | Original ↗ | .md | #ai-security | #cloud | #rce

194.

Introducing SITF: The First Threat Framework Dedicated to SDLC Infrastructure

blog | 2026-01-26 17:25 | wiz.io | Original ↗ | .md | #supply-chain | #devsecops | #ci-cd

195.

The 282% ROI of Unified Security

blog | 2026-01-21 13:00 | jfrog.com | Original ↗ | .md | #ai-security | #supply-chain | #appsec

196.

Understanding Open-Source License Risk in Modern Software

blog | 2026-01-19 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #devsecops | #open-source

197.

CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild

blog | 2026-01-15 15:00 | wiz.io | Original ↗ | .md | #cloud | #supply-chain | #aws

198.

JFrog Achieves AWS Security Competency

blog | 2026-01-14 11:54 | jfrog.com | Original ↗ | .md | #ai-security | #cloud | #supply-chain

199.

SAST vs SCA: Securing the Code You Write and the Code You Depend On

blog | 2026-01-06 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #appsec | #vulnerability-management

200.

2026: Trust Is the Currency, Platforms Are the Standard, and Vendors Must Justify Their Seat at the Table

blog | 2026-01-01 09:45 | jfrog.com | Original ↗ | .md | #ai-security | #rce | #supply-chain

201.

Why Enterprise and Fortune 500 Companies are Leaving Snyk and Checkmarx for JFrog

blog | 2025-12-31 19:30 | jfrog.com | Original ↗ | .md | #supply-chain | #appsec | #jfrog

202.

JFrog vs Checkmarx: An AppSec Solution Comparison

blog | 2025-12-31 15:24 | jfrog.com | Original ↗ | .md | #ai-security | #rce | #supply-chain

203.

Supply Chain Attack - How Attackers Weaponize Software Supply Chains

incident | 2025-12-26 00:00 | netlas.io | Original ↗ | .md | #supply-chain | #open-source | #incident-response

204.

Snipping the Long Tail of Shai-Hulud 2.0

blog | 2025-12-30 15:21 | wiz.io | Original ↗ | .md | #cloud | #supply-chain | #npm

205.

JFrog vs Snyk: Why Effective AppSec Must Move Beyond Source Code

blog | 2025-12-30 15:13 | jfrog.com | Original ↗ | .md | #rce | #supply-chain | #appsec

206.

Docker Hardened Images are Free: Scale Their Adoption with JFrog

blog | 2025-12-29 14:32 | jfrog.com | Original ↗ | .md | #supply-chain | #container-security | #jfrog

207.

swampUP Europe 2025 Recap

blog | 2025-12-23 16:23 | jfrog.com | Original ↗ | .md | #ai-security | #supply-chain | #jfrog

208.

The Breach You Didn’t Expect: Your AppSec Stack

blog | 2025-12-22 18:52 | jfrog.com | Original ↗ | .md | #supply-chain | #appsec | #devsecops

209.

Inside DPRK Operations: New Lazarus and Kimsuky Infrastructure Uncovered Across Global Campaigns

research | 2025-12-17 00:00 | hunt.io | Original ↗ | .md | #supply-chain | #threat-intelligence | #malware

210.

Catching malicious package releases using a transparency log

blog | 2025-12-12 12:00 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #threat-detection | #sigstore

← Previous More →