Tag

supply-chain

4 posts with this tag.

Other tags:All postsab1883ab1898acceptable-useacceptable-use-policyaccess-controlaccountabilityadmtadtechadvertisingage-verificationagentic-aiai-acceptable-useai-adoptionai-agent-governanceai-agent-security ai-agents

Aug 24, 2026·9 min read

LiteLLM Supply Chain Breach: 7-Point Vendor Audit Checklist

TeamPCP hijacked LiteLLM's build pipeline in March, exposing 2,500+ orgs. A 7-point self-audit if your team runs the open-source AI gateway.

ai-security vendor-risk supply-chainopen-source

Jun 5, 2026·10 min read

Miasma Worm and Phantom Gyp: The npm Supply Chain Attack That Bypasses Security Tools (June 2026)

A self-spreading worm compromised 57 npm packages in under 2 hours using binding.gyp instead of postinstall scripts, bypassing security scanners. What it means for teams that run npm install, and the 5 controls that limit your exposure.

ai-security supply-chainnpmdeveloper-tools

Apr 27, 2026·8 min read

AI Vendor Supply Chain Security: Checklist for Small Teams (2026)

Respond within 24 hours: AI vendor supply chain security checklist to map exposure, scope access, and contain a contractor breach like Vercel's.

ai-security vendor-risk supply-chain incident-response

Apr 1, 2026·12 min read

AI Vendor Security Incident Response: 4-Step Playbook for TypeScript AI Agent Teams

When your AI vendor has a security incident, your team has hours to respond. Scope, credential rotation, and documentation steps for small teams.

ai-security incident-response vendor-risk governance

Tag