Software Supply Chain | IT Brew

Cybersecurity disclosure

Supply-chain attack against open source projects could have big impact

One expert recommends professionals put package updates in purgatory to defend against these threats.

Caroline Nihill

Anthropic code leak exposed Claude information, but it might not be a total disaster

“There were a lot of interesting things in the source code, hidden features, potential new features,” Arctic Wolf VP of AI says.

Binary code being enlarged by a digital magnifying display.

Data exfiltrators stand out as open-source malware rises

And developers aren’t trained to be skeptical, according to one software pro.

Binary code being enlarged by a digital magnifying display.

GitHub supply-chain attack signals possibility of more code chaos

StepSecurity’s Varun Sharma explains the “nightmarish scenario.”

AI supply chain

Regardless of its uncertain fate, Biden’s cybersecurity order reveals third-party risk as high priority

One IT pro saw the executive order as a “Hail Mary.”

Mouse clicker arrows attacking monitors.

Software packages affected by supply-chain attacks are down, but more customers are impacted

About 590 software packages were affected by a supply-chain cyberattack in 2024, a 98% decrease from the year prior.

Brianna Monsanto

Money symbol(s) hovering over a hand

DHS to drop $11 million on open-source security funding, national cyber director says

Harry Coker, Jr. told hackers at DEF CON 32 that the federal government must secure open source and encourage memory-safe code.

AI agents are starting to do more than access systems. They can invoke tools, execute workflows, and take action across business applications. As that autonomy grows, IT needs visibility into what each agent is allowed to do, what it actually did, who owns it, and how to revoke access when needed. Learn how JumpCloud helps govern AI agents alongside human and device identities.