#supply-chain

3 items tagged #supply-chain.

GUIDE 2026-05-19

Hardening your agent's supply chain

A concrete checklist for the May 2026 failure modes: pin skills and MCP servers, SBOM the agent's dependencies, require auth on MCP, and review config files as code.

Owner · 4 min #security #supply-chain

NEWS 2026-05-19

A wave of agent-targeting CVEs lands in May 2026

Researchers disclosed a cluster of vulnerabilities in AI coding agents in May 2026: prompt-injection-to-RCE in CrewAI, an unauthenticated Azure SRE Agent endpoint, a poisoned AGENTS.md chain against Codex, and over a thousand malicious skills.

Owner · 2 min #security #agents

BLOG 2026-03-02

The MCP server supply chain question nobody is asking yet

MCP servers are npm packages with deep access to your environment. The supply chain risks aren't being treated as seriously as they should be.

Owner · 5 min #mcp #security