Topic
All digests tagged Supply Chain Security
Suggested route
Move from earlier context through the available material to the newest signals. This route is a reading aid, not a difficulty ranking.
The talk analyzes how worms exposed the real attack surface of open source. It details how speed, automation, and LLMs have transformed supply-chain attacks, making trust the most critical security challenge.
Read article
The panel discusses securing AI software factories, arguing that agents must be treated as unpredictable actors. Key controls include enforcing boundaries, never letting agents hold credentials, and securing the dynamic supply chain.
Read article
AI agent security is an infrastructure problem, not a model problem. Learn how to prevent catastrophic data leaks using isolated workspaces, short-lived credentials, and model proxies.
Read article
The workshop details the shift from traditional software security to AI-native defenses, covering topics like Prompt Injection, AI Bomb inventory, and integrating security hooks into CI/CD pipelines for agentic workflows.
Read article
Building agents is like shipping a 'malware starter pack.' Security requires deterministic layers, scanning the entire content supply chain, and ensuring the LLM acts only as an adviser, never an enforcer.
Read article
The discussion explores Prompt Injection as Role Confusion, detailing how attackers forge chain-of-thought reasoning to bypass LLM guardrails. Key mitigation strategies include implementing instruction hierarchies and sandboxing.
Read article
Experts discuss the OWASP LLM Top 10, noting that excessive agency is the biggest risk. They advise treating AI agents as privileged identities and operationalizing CISA SBOM data for true cyber resilience.
Read article
Open weights models are becoming an economic necessity, driving standardization and commoditization across the industry. The shift prioritizes cost efficiency over raw intelligence, making open source viable again.
Read article
Joseph Katsioloudes demonstrates how AI can scale scarce security expertise by integrating advanced tools like MCPs and agentic workflows into the CI/CD pipeline. He details best practices for secure coding at scale.
Read article