Software supply-chain attacks
AI toolchains under siege, from GitHub to routers
By the numbers
High-profile incidents this week
Infected routers
Tooling impact
Healthcare and medical devices disrupted by network outages Critical sector hit
A wave of supply-chain attacks this week hit developer tools, open-source packages, and cloud-connected devices, creating a crisis for AI development pipelines and production systems, and elevating software integrity to a top security priority. With incidents ranging from a compromised Trivy scanner to invisible malicious code on GitHub and thousands of infected routers, the cascading risks now threaten healthcare, critical infrastructure, and trust in AI deployments.
Articles & Coverage
Quantum computers need vastly fewer resources than thought to break vital encryption
Biz & IT - Ars Technica · Mar 31
Google bumps up Q Day deadline to 2029, far sooner than previously thought
Biz & IT - Ars Technica · Mar 25
Self-propagating malware poisons open source software and wipes Iran-based machines
Biz & IT - Ars Technica · Mar 24
Widely used Trivy scanner compromised in ongoing supply-chain attack
Biz & IT - Ars Technica · Mar 20
Cloud service providers ask EU regulator to reinstate VMware partner program
Biz & IT - Ars Technica · Mar 19
Federal cyber experts called Microsoft's cloud a "pile of shit," approved it anyway
Biz & IT - Ars Technica · Mar 18