Supply-chain attack against open source projects could have big impact
One expert recommends professionals put package updates in purgatory to defend against these threats.

One expert recommends professionals put package updates in purgatory to defend against these threats.
“There were a lot of interesting things in the source code, hidden features, potential new features,” Arctic Wolf VP of AI says.
One expert reported seeing more attackers going after third parties for data.
As of June, AI code produced 10,000 new security findings per month, according to research from Apiiro.
And developers aren’t trained to be skeptical, according to one software pro.
StepSecurity’s Varun Sharma explains the “nightmarish scenario.”
“The rush to ‘AI all the things’ is just exacerbating that attack surface,” one expert says.
AI agents are starting to do more than access systems. They can invoke tools, execute workflows, and take action across business applications. As that autonomy grows, IT needs visibility into what each agent is allowed to do, what it actually did, who owns it, and how to revoke access when needed. Learn how JumpCloud helps govern AI agents alongside human and device identities.
From cybersecurity and big data to cloud computing, IT Brew covers the latest trends shaping business tech in our 4x weekly newsletter, virtual events with industry experts, and digital guides.
By subscribing, you accept our Terms & Privacy Policy.