software supply chain
PulseAugur coverage of software supply chain — every cluster mentioning software supply chain across labs, papers, and developer communities, ranked by signal.
3 day(s) with sentiment data
-
ATM Security Flaws Expose Software Supply Chain Risks; Game Dev Ditches AI
A security researcher has uncovered nine vulnerabilities in ATM encryption and authentication software, highlighting broader issues within the software supply chain. Separately, the developer of the game "1666: Amsterda…
-
9,248 MCP Servers Scanned: Widespread Security Gaps and Lack of Trust Revealed
A security audit of 9,248 Model Context Protocol (MCP) servers revealed significant vulnerabilities and lack of best practices. The audit found that 0.3% of servers attempted to access sensitive files, 11% exhibited und…
-
LLMs hallucinate software packages, posing supply chain risks; defenses evaluated
Researchers are investigating the problem of Large Language Models (LLMs) hallucinating non-existent software packages when generating code. This issue poses a risk to the software supply chain by creating exploitable v…
-
CISA mandates new SBOM rules to expose risky software
The Cybersecurity and Infrastructure Security Agency (CISA) is updating its requirements for Software Bills of Materials (SBOMs). This initiative aims to enhance transparency and identify software components that may po…
-
Attackers can easily inject backdoors into AI models, risking software supply chain security
Security experts have demonstrated a method for attackers to easily insert hidden backdoors into AI models. This vulnerability poses significant risks to the software supply chain, potentially compromising the integrity…
-
Industry misuses 'CBOM' term, shifting transparency burden to buyers
The term 'cryptographic bill of materials' (CBOM) is being misused in the industry, according to Atsushi Yamada, CEO of ISARA Corporation. Yamada argues that a true bill of materials is a manufacturer's declaration of w…
-
New CBOM spec aims to bring SBOM-like provenance to LLM prompts
The author proposes Context Bill of Materials (CBOM), an open specification and SDK, to address the lack of auditable provenance for data fed into large language models. Similar to Software Bill of Materials (SBOM) used…
-
New framework maps LLM agent skill dependencies and risks
A new research paper introduces Agent Skill Supply Chains (ASSCs) to address the challenges of managing dependencies and risks within Large Language Model (LLM) agent skills. The proposed framework, inspired by Software…
-
New framework automates advisories for agentic AI systems
Researchers have developed a framework for automating advisories for agentic AI systems, focusing on deterministic environment capture and runtime telemetry. This AIBOM-driven CSAF-VEX system computes exploitability bas…
-
AI Bill of Materials (AIBOMs) poised to become product purchase requirement
The concept of AI Bill of Materials (AIBOMs) is gaining traction as a way to ensure transparency and accountability in AI products. These AIBOMs are expected to become a requirement for product purchases, similar to how…
-
G7 nations release AI software supply chain guidance
The G7 nations have introduced guidance for AI software supply chain descriptions, known as SBOMs. This initiative aims to enhance transparency and security for companies distributing AI software.
-
Companies adopt AI-BOMs to track models, datasets, and agents amid shadow AI concerns
The concept of a Software Bill of Materials (SBOM) is evolving to address the complexities of AI integration within enterprises, leading to the development of AI Bills of Materials (AI-BOMs). These AI-BOMs aim to provid…