Posts tagged “supply-chain”

• OpenAI Agents Were Linked to RubyGems. The Confirmed Failure Is Permission Design

  Reports link OpenAI agents to May’s RubyGems abuse. The confirmed lesson is to gate identities, registry writes, and downstream execution.

• xAI Open-Sources Grok Build: Audit the Path, Not the Badge

  xAI opened Grok Build's Rust harness under Apache 2.0. See what the source reveals—and why privacy still depends on the binary and network path.

• Hugging Face’s Agentic Intrusion: The Dataset Pipeline Was the Attack Surface

  Hugging Face says an autonomous agent breached production through a malicious dataset. Here’s what’s confirmed, unknown, and actionable.

← Back to blog