Four AI supply-chain attacks in 50 days exposed the release pipeline red teams aren’t covering

via openai.com

Short excerpt below. Read at the original source.

Four supply-chain incidents hit OpenAI, Anthropic and Meta in 50 days: three adversary-driven attacks and one self-inflicted packaging failure. None targeted the model, and all four exposed the same gap: release pipelines, dependency hooks, CI runners, and packaging gates that no system card, AISI evaluation, or Gray Swan red-team exercise has ever scoped. On May […]

Read at Source