Tag

supply chain security

4 articles on supply chain security.

← All blog posts
MCP Security Risks: Tool Poisoning, Prompt Injection, and the New AI Agent Attack Surface
AI & MLMay 9, 2026

MCP Security Risks: Tool Poisoning, Prompt Injection, and the New AI Agent Attack Surface

Model Context Protocol integrations give agents access to tools, files, and services. That power creates new risks: tool poisoning, prompt injection, overbroad permissions, and untrusted server abuse.

10 min read
Malicious npm Packages: Detecting Open-Source Supply Chain Compromise
Supply ChainMay 3, 2026

Malicious npm Packages: Detecting Open-Source Supply Chain Compromise

Malicious npm packages use typosquatting, dependency confusion, install scripts, and maintainer compromise to steal secrets and backdoor builds. Learn practical detection and response.

10 min read
Supply Chain CVE Response: SBOMs, Dependency Risk, and Coordinated Vulnerability Disclosure
Supply ChainApr 25, 2026

Supply Chain CVE Response: SBOMs, Dependency Risk, and Coordinated Vulnerability Disclosure

Build a modern supply-chain security program: generate SBOMs, map CVEs to components, integrate EPSS and KEV, and coordinate fixes across vendors and open-source maintainers.

9 min read
Watering Hole Attacks: Compromising the Sites Your Victims Already Trust
Threat IntelApr 5, 2026

Watering Hole Attacks: Compromising the Sites Your Victims Already Trust

Instead of spear-phishing individuals, APTs infect websites their targets routinely visit. Learn how watering hole campaigns work and how to harden web supply chains and detection.

2 min read