Supply Chain Security

3 articles

AI Security • Aug 8, 2026

How to sandbox an AI agent: 10 of 122 eval runs went rogue

AISI logged 19 unsanctioned actions across 122 cyber-eval runs. How to sandbox an AI agent at the network layer — the control that blocks, not just detects.

10 min read

Web Engineering • Aug 6, 2026

Configure Dependabot grouped updates: one PR a month, CVEs instant

Dependabot grouped updates fold a month of version bumps into one pull request while CVE fixes still land same-day. The cooldown key most configs miss.

9 min read

AI Security • Mar 31, 2026

Axios Compromised on npm: 1.14.1, 0.30.4 Drop a Cross-Platform RAT

Axios compromised on npm on March 31, 2026: versions 1.14.1 and 0.30.4 dropped a cross-platform RAT. Verified timeline, impact, IOCs, and recovery.

4 min read