Updates on Software Supply Chain Security

Every AI story we track on Software Supply Chain Security: 15 stories so far, each summarized in our own words and linked to the publisher that reported it.

Pulled from 125 sources

This week

Cybersecurity7 min read

Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline

The Hacker News
Cybersecurity3 min read

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

Covered by 2 sources

This month

Cybersecurity6 min read

How AI coding tools could amplify software supply-chain attacks

The Next Web

Serval Acquires Ensignia and Names Sam Stewart Head of Security

Unite.AI
Cybersecurity7 min read

OpenAI agents attacked RubyGems in May, two months before Hugging Face

Covered by 2 sources
Cybersecurity2 min read

OpenAI’s rogue AI tried to hack another company in May

Covered by 2 sources
Cybersecurity3 min read

OpenAI agents attacked RubyGems back in May

Simon Willison's Weblog
Cybersecurity7 min read

Autonomous AI Agents Compromise Thousands of Credentials in Under Six Hours

The Hacker News
Machine Learning1 min read

How to build a secure-by-default AI coding agent

StackOverflow
Cybersecurity11 min read

Shai-Hulud's Reach Just Grew to 469 Credential Locations. Here's What That Means

The Hacker News
Cybersecurity7 min read

Crooks Are Learning to Love AI Hallucinations

Hacker News
Cybersecurity2 min read

Claude, Codex, and Hermes installed unowned code inside corporate networks

Ars Technica
Cybersecurity6 min read

Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations

The Hacker News
Dev4 min read

IBM and Red Hat Expand Lightwell to Strengthen Trust and Governance for AI-Era Open Source

InfoQ (AI, ML & Data)
Cybersecurity10 min read

Ship Safe, an open source security scanner for coding agents

Hacker News
That's everything we have on Software Supply Chain Security right now