--- title: "#supplychainsecurity articles | Hashnode" description: "Explore 43 articles tagged #supplychainsecurity on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/supplychainsecurity" --- Tag # #supplychainsecurity 43 posts · 2 followers [Khushi Trivedi](https://hashnode.com/@trivedi-khushi) · [Nov 3](https://hashnode.com/posts/software-freshness-is-a-security-metric-learn-to-measure-now/6ae9268e2060d311d9c6d83e) ### [Software Freshness Is a Security Metric! Learn to Measure Now...](https://khushitrivedi.hashnode.dev/software-freshness-is-a-security-metric-learn-to-measure-now?utm_source=hashnode&utm_medium=feed) The dashboard was green. Every image in the service had passed its scan, the report was attached to the release, and I was ready to close the ticket. Then I did a small exercise I had read about: pick 7 min read · [khushitrivedi.hashnode.dev](https://khushitrivedi.hashnode.dev/software-freshness-is-a-security-metric-learn-to-measure-now?utm_source=hashnode&utm_medium=feed) [Tech Skill School](https://hashnode.com/@techskillschool) · [Nov 2](https://hashnode.com/posts/cyber-pulse-monthly-october-2026-edition/6ae81cc2d78b2b6e45758405) ### [Cyber Pulse Monthly : October 2026 Edition](https://techskillschool.hashnode.dev/cyber-pulse-monthly-october-2026-edition?utm_source=hashnode&utm_medium=feed) 𝗣𝗛𝗣𝟮𝗦𝗵𝗲𝗹𝗹 𝗖𝗿𝗶𝘁𝗶𝗰𝗮𝗹 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀 𝗧𝗿𝗶𝗴𝗴𝗲𝗿 𝗪𝗶𝗱𝗲𝘀𝗽𝗿𝗲𝗮𝗱 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝗮𝘁𝗶𝗼𝗻 𝗔𝘁𝘁𝗲𝗺𝗽𝘁𝘀 PHP2Shell vulnerabilities exposed PHP-based web applica 4 min read · [techskillschool.hashnode.dev](https://techskillschool.hashnode.dev/cyber-pulse-monthly-october-2026-edition?utm_source=hashnode&utm_medium=feed) [Manuela Schrittwieser](https://hashnode.com/@neuralstackms) · [Oct 6](https://hashnode.com/posts/supply-chain-poisoning-in-ai-ml-pipelines/6ac520d1d186d838fdcaf75b) ### [Supply Chain Poisoning in AI/ML Pipelines](https://neuralstackms.tech/supply-chain-poisoning-in-ai-ml-pipelines?utm_source=hashnode&utm_medium=feed) NeuralStack | MS – AI Security Engineering Summary A modern ML system is assembled, not written. Training corpora are scraped or downloaded, weights are pulled from public hubs, and hundreds of trans 16 min read · [neuralstackms.tech](https://neuralstackms.tech/supply-chain-poisoning-in-ai-ml-pipelines?utm_source=hashnode&utm_medium=feed) [5](https://hashnode.com/posts/supply-chain-poisoning-in-ai-ml-pipelines/6ac520d1d186d838fdcaf75b) [Khushi Trivedi](https://hashnode.com/@trivedi-khushi) · [Sep 24](https://hashnode.com/posts/dependency-sprawl-the-transitive-dependencies-that-own-your-attack-surface/6ac856b40c77e192f4ec0b85) ### [Dependency Sprawl: The Transitive Dependencies That Own Your Attack Surface](https://khushitrivedi.hashnode.dev/dependency-sprawl-the-transitive-dependencies-that-own-your-attack-surface?utm_source=hashnode&utm_medium=feed) 62.89% of vulnerabilities reach you through transitive dependencies, not direct ones. Log4Shell and the xz backdoor show why depth hides risk. 5 min read · [khushitrivedi.hashnode.dev](https://khushitrivedi.hashnode.dev/dependency-sprawl-the-transitive-dependencies-that-own-your-attack-surface?utm_source=hashnode&utm_medium=feed) [Khushi Trivedi](https://hashnode.com/@trivedi-khushi) · [Sep 22](https://hashnode.com/posts/you-chose-12-dependencies-but-actually-shipped-1-400/6ac852256eedbff5b16987e7) ### [You Chose 12 Dependencies. But Actually Shipped 1,400](https://khushitrivedi.hashnode.dev/you-chose-12-dependencies-but-actually-shipped-1-400?utm_source=hashnode&utm_medium=feed) One npm install pulled 65 packages from one dependency. See how transitive dependencies explode your attack surface, with a real test and the fix. 5 min read · [khushitrivedi.hashnode.dev](https://khushitrivedi.hashnode.dev/you-chose-12-dependencies-but-actually-shipped-1-400?utm_source=hashnode&utm_medium=feed) [Khushi Trivedi](https://hashnode.com/@trivedi-khushi) · [Sep 21](https://hashnode.com/posts/what-supply-chain-security-actually-means-when-you-ship-containers/6ac84f108747a72b76b61012) ### [What "Supply Chain Security" Actually Means When You Ship Containers](https://khushitrivedi.hashnode.dev/what-supply-chain-security-actually-means-when-you-ship-containers?utm_source=hashnode&utm_medium=feed) A plain definition of supply chain security for containers: what’s in your image, where it came from, and whether you can prove it. 4 min read · [khushitrivedi.hashnode.dev](https://khushitrivedi.hashnode.dev/what-supply-chain-security-actually-means-when-you-ship-containers?utm_source=hashnode&utm_medium=feed) [Samson Goddy](https://hashnode.com/@samson_goddy) · [Sep 4](https://hashnode.com/posts/open-source-ai-privacy-builders-playbook/6a9b3d0a29906bc38ab342bc) ### [Open Source x AI x Privacy: A Builder's Playbook for What's Next](https://blog.samsongoddy.com/open-source-ai-privacy-builders-playbook?utm_source=hashnode&utm_medium=feed) AI is evolving faster than most systems can keep up. 9 min read · [blog.samsongoddy.com](https://blog.samsongoddy.com/open-source-ai-privacy-builders-playbook?utm_source=hashnode&utm_medium=feed) [Human\_On\_The\_Loop](https://hashnode.com/@xaasware) · [Jul 31](https://hashnode.com/posts/got-a-sandbox/6a6c2f628cda7e8b05cbb258) ### [Got a Sandbox?](https://hotl.xaasware.io/got-a-sandbox?utm_source=hashnode&utm_medium=feed) Anthropic's models breached three real companies during safety testing — and the containment failure matters more than the models. 4 min read · [hotl.xaasware.io](https://hotl.xaasware.io/got-a-sandbox?utm_source=hashnode&utm_medium=feed) [ThankGod Chibugwum Obobo](https://hashnode.com/@actocodes) · [Jun 21](https://hashnode.com/posts/dependency-auditing-at-scale/6a37bd245624a6cf25ffdaa8) ### [Dependency Auditing at Scale: How to Automate Supply Chain Security with Dependabot and Snyk](https://actocodes.hashnode.dev/dependency-auditing-at-scale?utm_source=hashnode&utm_medium=feed) The average modern web application depends on hundreds, sometimes thousands, of transitive npm packages. Each one is a potential attack vector, a vulnerability waiting to be disclosed, a maintainer ac 10 min read · [actocodes.hashnode.dev](https://actocodes.hashnode.dev/dependency-auditing-at-scale?utm_source=hashnode&utm_medium=feed) [404 Founders](https://hashnode.com/@404-founders) · [May 16](https://hashnode.com/posts/the-quiet-places-attackers-enter/6a0bc8eb4e81b73048cc6dcf) ### [The Quiet Places Attackers Enter](https://404-founders.com/blog/the-quiet-places-attackers-enter?utm_source=hashnode&utm_medium=feed) Note on Exchange exploitation, Cisco SD-WAN risk, poisoned packages, fake AI repositories, and why trusted systems become attack paths. 10 min read · [404-founders.com](https://404-founders.com/blog/the-quiet-places-attackers-enter?utm_source=hashnode&utm_medium=feed)