DEV Community

#supplychain

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Print Servers and Artifact Repositories: Measuring Two Overlooked Attack Surfaces
kozhevniko profile

Print Servers and Artifact Repositories: Measuring Two Overlooked Attack Surfaces

#security #zoomeye #exposure #supplychain
Comments
3 min read
One Console, Every Customer: What the N-able N-central Pre-Authentication RCE Says About RMM Concentration Risk
jeffreyciend profile

One Console, Every Customer: What the N-able N-central Pre-Authentication RCE Says About RMM Concentration Risk

#vulnerabilitymanagement #msp #rmm #supplychain
Comments
3 min read
The Default Join Key That Let Attackers Mint Admin Tokens on JFrog Artifactory
bianliang profile

The Default Join Key That Let Attackers Mint Admin Tokens on JFrog Artifactory

#supplychain #authenticationbypass #artifactory #cve202682329
Comments
4 min read
From Warehouses to Algorithms: How JD Logistics Builds a Technology-Driven Supply Chain
lyee_blair_a5996ecaf9cd2b profile

From Warehouses to Algorithms: How JD Logistics Builds a Technology-Driven Supply Chain

#jdlogistics #jingdong #supplychain #ai
Comments
7 min read
Your coding agent installed 23 packages in a minute. Your SBOM saw zero.
secbyjasonmiller profile

Your coding agent installed 23 packages in a minute. Your SBOM saw zero.

#supplychain #aiagents
Comments
3 min read
Your Coding Agent Reads the Repository Before You Do: Configuration Injection in AI Developer Tooling
jeffreyciend profile

Your Coding Agent Reads the Repository Before You Do: Configuration Injection in AI Developer Tooling

#aisecurity #supplychain #developertooling #appsec
Comments
3 min read
Two encrypted emails in twenty years
phpboyscout profile

Two encrypted emails in twenty years

#opensource #security #signing #supplychain
Comments
5 min read
Field report: 1246 real pull requests scanned, 0 hallucinated packages confirmed
mag_solutions_ai profile

Field report: 1246 real pull requests scanned, 0 hallucinated packages confirmed

#security #supplychain #opensource #devops
Comments
2 min read
Artifactory on the Internet: Measuring the Exposure Behind CVE-2026-82329
jeffreyciend profile

Artifactory on the Internet: Measuring the Exposure Behind CVE-2026-82329

#zoomeye #exposuremanagement #supplychain #artifactory
Comments
4 min read
Jenkins Controller Compromise Is a Supply Chain Event: Lessons from 20 Plugin Flaws
kozhevniko profile

Jenkins Controller Compromise Is a Supply Chain Event: Lessons from 20 Plugin Flaws

#security #jenkins #supplychain #cicd
Comments
4 min read
Self-Hosted CI Runners Are Shared Secrets: Threat Modelling Your Build Infrastructure
kozhevniko profile

Self-Hosted CI Runners Are Shared Secrets: Threat Modelling Your Build Infrastructure

#cicd #supplychain #devops #runnersecurity
Comments
3 min read
When the Default Configuration Is the Vulnerability: JFrog Artifactory's Empty Join Key and the Supply-Chain Blast Radius
bianliang profile

When the Default Configuration Is the Vulnerability: JFrog Artifactory's Empty Join Key and the Supply-Chain Blast Radius

#security #supplychain #artifactory #authentication
Comments
4 min read
An AI Chained Six Avada Flaws Into a Working Exploit in Two Hours
secbyjasonmiller profile

An AI Chained Six Avada Flaws Into a Working Exploit in Two Hours

#apiauth #idor #supplychain #aiagents
Comments
3 min read
The fastest trigger produces no CVE
fortitudeomnis profile

The fastest trigger produces no CVE

#security #opensource #devops #supplychain
Comments
3 min read
Inside the LiteLLM hack: 153GB, 433,909 Files, 2,488 Organizations
dwayne_mcdaniel profile

Inside the LiteLLM hack: 153GB, 433,909 Files, 2,488 Organizations

#security #supplychain #devops #appsec
1
Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.