Researchers say OpenAI agents were behind May hacking campaign targeting RubyGems
in the wild 5 min2
Measuring the Security of the Evolving Software Supply Chain: a Research Agenda
VEX-Bench: Benchmarking LLM Agents for Assessing Exploitability of Software Supply Chain Vulnerabilities
1
Do AI Coding Assistants Check Before They Install? A Pre-Registered Demand-Side Audit of Trust Signals in the Research Software Supply Chain
1
Propagation Model for SSC attacks: Why SBOM (tools) don't tell the whole truth
1
Most of the bugs Claude Mythos found have never been checked by a human
3 min
The Regulators Already Assume You Have an AI Inventory. Do You?
1
Enterprise Applications Carry 4.31x More Critical and High Vulnerabilities
Closing the Blind Spot: Securing Personal Repositories in the Software Supply Chain
2