Supply-chain vulnerabilities in software

Software supply-chain vulnerabilities are increasing, with compromised packages like Trivy and Axios leading to stolen API keys and secrets. The Trivy breach notably lacked a CVE for three days, leaving many users unaware. Simultaneously, Dell highlights that integrating agentic AI into core business operations introduces new risks. As AI agents gain autonomous capabilities, security teams must rethink infrastructure protection and risk control to address the evolving challenges associated with these autonomous systems and data security.