Google releases supply chain security mitigation guidance, addressing open-source poisoning trends
TechNadu · x · 2026-08-02
Google Threat Intelligence Group (GTIG) and Mandiant published a blog detailing the growth of open-source software supply chain attacks from 2025 to early 2026, and provided mitigation and hardening recommendations. The guide notes attackers increasingly poison open-source packages and exploit developer tools, highlighting new risks from AI-assisted development workflows.
Related event: Google Warns of 1444% Surge in Malicious Packages Targeting AI Workflows(3 posts)→
More from Safety
- Untethered iOS 27.0.1 jailbreak demoed on iPhone 18 Pro at Hexacon — jedisct1 · 2026-10-16
- China requires MOFCOM approval to open-source models above 2T params or 10^26 FLOPS — zephyr_z9 · 2026-10-16
- Universal forgery attack breaks Chinese PQC signature Origami using only the public key — matthew_d_green · 2026-10-16
- 400+ researchers sign open letter: AI needs both alignment and containment — ghadfield · 2026-10-16
- Celebrity AI Deepfakes Rack Up Millions of Views as Verified Fan Accounts Spread Fakes — ChuckDBrooks · 2026-10-16
- New Yorker excerpt: Brockman kept asking 'how do we win?' when pitched 2017 AI safety coalition — ben_j_todd · 2026-10-16