Supply Chain Attack
01 Oct 2026
7 min read
When the Model File Becomes the Attack Surface
A look at the Ollama vulnerability and why AI security must protect not just model artifacts, but the software that parses, transforms, and distributes them.
Blogs
A Curated Collection of Writings, Research, and Solutions
FEATURED ARTICLES
When the Model File Becomes the Attack Surface
A look at the Ollama vulnerability and why AI security must protect not just model artifacts, but the software that parses, transforms, and distributes them.
Latest Blogs
Supply Chain Attack
30 Sept 2026
7 min read
ChainDrop & MemTensor: Why Provenance Isn't Enough
ChainDrop had valid provenance. MemTensor bypassed install-script controls. Learn what these attacks reveal about verifying package behavior and release history
Cyber Security
24 Sept 2026
10 min read
5 Software Supply Chain Attack Vectors and How to Stop Them
Know the five software supply chain attack vectors and how vulnerable packages, malicious code, fake packages, altered artifacts, and compromised suppliers can reach your enviornment
Comparison
27 Aug 2026
6 min read
Official Redis Docker Image vs CleanStart Redis Image
Compare official Redis Docker image with CleanStart Redis. See image size, packages, executables, CVEs, SBOMs, provenance, & more in this technical comparison.
Cyber Security
26 Aug 2026
9 min read
Minimus Is Shutting Down: What to Look for in Your Next Container Image Provider
Minimus is shutting down. Learn what to look for in a hardened container image provider and why verified software artifacts matter for your next foundation.
Cyber Security
21 Aug 2026
11 min read
Are Docker Hardened Images Free? What Enterprises Should Evaluate Before Adoption
Docker Hardened Images are now available for free, but secure container delivery requires more than image access. Learn what enterprises should evaluate around verification, maintenance, compliance, and trust.
20 Aug 2026
5 min read
Official Python Docker Image vs CleanStart Python Image
Compare official Python Docker image with CleanStart Python. See image size, packages, executables, CVEs, SBOMs, provenance, & more in this technical comparison.
Supply Chain Attack
18 Aug 2026
7 min read
LiteLLM Supply Chain Attack: Why Verified Software Artifacts Matter for AI Security
The LiteLLM supply chain attack shows why vulnerability scanning is not enough. Learn how verified software artifacts strengthen AI software security.
Compliance
14 Aug 2026
8 min read
EU Cyber Resilience Act (CRA): What Manufacturers Must Report by 11 September 2026
Understand the EU Cyber Resilience Act reporting requirements, including what triggers reporting, the 24-hour and 72-hour deadlines, who must report, and how to prepare for 11 September 2026.