// tag

#secure-development

AI Model Supply Chain Security: The Risk of Pulling Pretrained Models From the Internet

Your developers are downloading pretrained AI models from public hubs the same way they install npm packages — and the same supply-chain risks apply. Heres what researchers have found, and how to vet a model before you deploy it.

Software Supply Chain Attacks: Lessons from the 2026 npm Compromises

A widely-used npm package with over 100 million weekly downloads was hijacked in 2026 through a single compromised maintainer account. Here is what happened and what it means for any business relying on open-source software.

Software Supply Chain Security: How Third-Party Dependencies Become Attack Paths

Third-party and supply-chain breaches rose sharply in 2026, now representing nearly half of all incidents analyzed by Verizon. Here is where dependency risk actually enters your environment, and what to do about it.