11 stories tagged Supply Chain
A federal judge ruled the Trump administration lacks sufficient evidence to justify labeling Anthropic a supply-chain risk, casting doubt on the government's 2025 ban of its AI technology.
Red Hat has confirmed that multiple packages in its official NPM channel were backdoored, and anyone who has downloaded the affected packages should investigate immediately. The attack is a supply chain compromise through the company's own official npm channel.
Taiwan Semiconductor Manufacturing Co. (TSMC), the world's largest chip maker, is struggling to meet the surging demand for AI chips. Even with new factories in the US, supply can't keep up with the explosion in AI development. This bottleneck could slow down AI progress for everyone.
OpenAI has detailed its response to a recent supply chain attack involving the TanStack npm package. The company is urging macOS users to update their apps by June 12, 2026, to ensure security.
Choco leveraged OpenAI APIs to automate food distribution, significantly boosting productivity. The implementation highlights real-world AI applications in supply chain management.
Anthropic continues high-level discussions with the Trump administration, even after being labeled a supply-chain risk by the Pentagon. This signals a complex relationship between the AI company and U.S. policymakers.
The Trivy vulnerability scanner has been compromised in a supply-chain attack, potentially exposing sensitive data. Admins are urged to rotate their secrets immediately.
OpenAI has responded to a supply chain attack on Axios by rotating macOS code signing certificates and updating its apps. The company confirmed that no user data was compromised in the incident.
A new study highlights the risks of malicious attacks on the LLM supply chain, demonstrating how agents can be compromised. The findings underscore the need for robust security measures in AI development.
Researchers developed machine learning models to predict container service needs and dwell times, reducing unproductive moves at terminals. The study leverages historical data to improve operational efficiency in shipping logistics.
A supply-chain attack using invisible Unicode code has affected GitHub and other repositories. The attack exploits code that is invisible to the human eye.