Tag
#supply-chain
4 posts tagged supply-chain.
- digest
AI Security Week: May 18, 2026
A self-propagating npm/PyPI worm sweeps up AI SDKs including Mistral AI and Guardrails AI, two critical RCE classes in the vLLM inference server, and the U.S. CAISI signs frontier-model pre-deployment testing agreements. Verify all specifics against primary sources.
- digest
AI Security Week: May 10, 2026
Analysis and commentary: training-data poisoning as a durable class, ATLAS as a finding taxonomy, red-teaming through the data channel, and the EU AI Act's staged timeline. Verify all specifics against primary sources.
- digest
AI Security Week: May 8, 2026
Analysis and commentary: the NIST AI RMF and its Generative AI Profile as a control map, the model/data supply-chain compromise class, why model extraction is a real business risk, and a defender's reading of safetensors. Verify all specifics against primary sources.
- digest
AI Security Week: May 4, 2026
Analysis and commentary: transfer-resistant adversarial-example research, the recurring typosquat/supply-chain class against ML packaging, NIST AI RMF direction, and why AI-assisted phishing is the realistic near-term risk. Verify specifics against primary sources.