Latest from Jason
Blogs
From Static Scans to Runtime Awareness: The Next Phase of Software Supply Chain Security
A growing wave of software supply chain attacks, including Shai-Hulud, Axios and LiteLLM, is exposing weaknesses in conventional security tooling. Malicious open-source packages can execute harmful code during installation, often before traditional security checks take effect. Despite high confidence in existing defenses, many organizations lack proactive controls such as package cooldown periods, pre-ingestion scanning and continuous threat intelligence evaluation.
Oct 19, 2026 · 3 min