01
11 June 2026 · 7 min read
Software supply chain attacks, explained
A single dependency can compromise thousands of companies at once. We explain how supply chain attacks work and how to limit dependency risk.
Topic · 5 articles
Supply chain
Attacks through dependencies, packages and software vendors, and practical ways to reduce supply chain risk.
PUBLISHING STANDARD TECHNICAL RESEARCH AND ANALYSIS
- AuthorNamed technical practitioner
- BasisDate and primary sources
- PurposeConcrete defensive action
FIELD NOTES
TOPIC INDEX
Latest research
02
25 May 2026 · 12 min read
Third-party risk management (TPRM): a guide
Your security ends at your weakest supplier. How to assess contractor risk, what to put in contracts and how to monitor suppliers efficiently.
03
16 May 2026 · 17 min read
AI Models Without Malware: Pickle vs SafeTensors
Pickle, SafeTensors, ONNX, and AI checkpoints explained: prevent code execution and build a controlled, verifiable model supply-chain pipeline.
04
16 September 2025 · 10 min read
Shai-Hulud: the first self-replicating npm worm
In autumn 2025 the Shai-Hulud worm infected hundreds of npm packages, spreading itself. We analyse the supply chain attack and how to secure your pipeline.
05
26 August 2025 · 10 min read
OAuth token theft: one vendor, hundreds of firms
In 2025, stolen OAuth tokens from Salesloft exposed hundreds of firms' Salesforce data — with no cracked passwords. A lesson on integration risk.
BR / NEXT STEP
Prefer a specialist to check it for you?
Book a free consultation. We'll talk about your infrastructure and real priorities.
NDA · clear scope · direct communication