AI development tools are amplifying supply chain risk and privacy exposures, especially through coding assistants and public social data. Security teams must quickly adjust defenses and controls as boundaries blur between trusted automation and attacker tactics.
Malicious npm campaigns and infostealer malware highlight escalating supply chain threats, while operational gaps in incident response and unregulated AI adoption persist. Today’s roundup covers open-source risk, credential theft, automation challenges, and the ongoing debate over AI’s social impact.