Supply Chain

6 guides tagged “Supply Chain”.

  1. InfoSec for Vibecoders: Every Security Concept Your AI-Generated Code Gets Wrong Your AI coding assistant ships SQL injection, exposed secrets, and broken access control by default. Learn every infosec concept you need to catch these before they hit production. 40+ linked guides. Information Security beginner 14 min
  2. How to Generate an SBOM for Your Project Generate an SBOM with Syft in one command, scan it with Grype for vulnerabilities, and add it to CI. A practical tutorial. Information Security beginner 7 min
  3. What Is Slopsquatting (AI Package Hallucination Attacks)? Slopsquatting is registering the fake package names AI models hallucinate, so generated code installs malware. Learn how it works and how to avoid it. Information Security intermediate 7 min
  4. What Is a Software Supply Chain Attack? A software supply chain attack compromises the tools or dependencies you trust, not your code. Learn the vectors and how to defend against them. Information Security beginner 8 min
  5. What Is a Software Bill of Materials (SBOM)? An SBOM is a machine-readable inventory of every component in your software. Learn what it contains, its formats, and why it's increasingly required. Information Security beginner 7 min
  6. What Is Dependency Confusion (and How Do You Prevent It)? Dependency confusion makes your build install a malicious public package instead of your private one. Learn how the attack works and how to pin it out. Information Security intermediate 5 min