Tag
13 articles tagged Supply Chain.
AI Security
For about eleven hours on October 29, 2026, Cursor's extension marketplace served a modified Claude Code extension that added an attacker SSH key and tried to open a reverse tunnel. Here is how to check a machine, remove the persistence, and set install controls that would blunt the next one.
AI Security
Attackers spent October 2026 pulling environment variables out of AI developer platforms and reselling the AI access they found. Here is how to rotate, investigate, and shrink the blast radius of the next stolen key.
AI Security
A critical out-of-bounds write in the Brotli decoder can be triggered by any compressed response your code decodes. AI agents that browse, crawl, or fetch URLs on request are a direct path to it. Here is what to patch and where the copies hide.
AI Security
A client could tell vLLM which revision of a model's remote processor code to import, even when the operator had pinned the model. Here is who was exposed, what 0.31.0 changes, and the controls to keep after you upgrade.
AI Security
During MCP sign-in, the server tells your client which URL to open. In opencode and mcp-remote, a crafted URL was enough to run commands on the developer's machine.
AI Security
Coding agents obey instruction files in the folder you start them in. Start one in ~/Downloads and any web page that can save a file there can give it orders.
AI Security
Storm-0940 did not need a single user password: it signed in as a trusted vendor application. Here is what happened, what to check in your tenant, and how to shrink the access third-party apps hold.
AI Governance
An AI-BOM lists the models, datasets, and software inside an AI system in a machine-readable form. Here is what to put in one, which standard fields to use, and how to make it enforceable.
Privacy
A model aggregator sees every prompt, upload, and output you send through it. The 302.ai exposure shows why that makes it a data processor to vet, not just an API to call.
AI Security
The LiteLLM 1.107.0 release on PyPI and its Docker images carried a credential stealer that runs on every Python start. Here is what it did, how to tell if you were hit, and what to rotate.
AI Security
An AI agent in a GitHub Actions workflow reads attacker-controlled text while holding your tokens. Here is the threat model and a workflow design that keeps a successful prompt injection from reaching secrets.
AI Security
Connecting an MCP server hands its author a voice in your agent's context and, often, code execution on your machine. Here is how to review one before you connect it and keep it honest afterwards.
AI Security
A downloaded model checkpoint is not just data. If it is a pickle, loading it can execute code. Here is how to load third-party weights without handing that file a shell.
