AI is transforming software supply chain risks: attacks are now primarily targeting developer workflows and open-source repositories, while threats surrounding model weights, vector stores, and MCP servers remain largely experimental. Attackers are even exploiting package names hallucinated by generative AI by registering them as malicious packages, which AI agents may then install automatically. According to […]
Agentic AI is developing faster than organizations can manage; the primary risks have now been proven in real incidents and CVEs. Prompt injection remains the most significant attack vector and forms the basis for many attacks on AI agents. The line between AI Safety and AI Security is blurring: the same design choices cause both […]