https://curasec.metacog.co.kr/tags/supply-chain/Recent content in Supply-Chain on CuraSecHugoen-usFri, 10 Jul 2026 09:49:54 -0500https://curasec.metacog.co.kr/insights/2026-07-10-brain0-ai-brain0-132/Fri, 10 Jul 2026 09:49:54 -0500https://curasec.metacog.co.kr/insights/2026-07-10-brain0-ai-brain0-132/<ul> <li><strong>Engineer — Learn:</strong> Tracks agent prompts behind commits and adds signed provenance attestations — worth evaluating if your team uses AI coding agents, but no active threat requiring immediate action.</li> <li><strong>SOC/IR — Skip</strong></li> <li><strong>Leader — Learn:</strong> Addresses AI agent auditability and DLP exposure in code pipelines — useful context for building a policy around AI-assisted development before it becomes a control gap.</li> </ul>https://curasec.metacog.co.kr/insights/2026-07-10-felons-fraudsters-flog-offensive-cybersecurity-startup/Fri, 10 Jul 2026 09:49:54 -0500https://curasec.metacog.co.kr/insights/2026-07-10-felons-fraudsters-flog-offensive-cybersecurity-startup/<ul> <li><strong>Engineer — Skip</strong></li> <li><strong>SOC/IR — Learn:</strong> Highlights the risk of sourcing threat intel or vulnerability data from unvetted offensive security vendors; useful context when evaluating new tool or feed vendors.</li> <li><strong>Leader — Plan:</strong> Review any vendor relationships or zero-day acquisition programs for due-diligence gaps; this case illustrates how fraudulent operators can enter the security supply chain under assumed identities.</li> </ul>https://curasec.metacog.co.kr/insights/2026-07-10-us-holds-off-blacklisting-deepseek-more-than-100-firms-deeme/Fri, 10 Jul 2026 09:49:54 -0500https://curasec.metacog.co.kr/insights/2026-07-10-us-holds-off-blacklisting-deepseek-more-than-100-firms-deeme/<ul> <li><strong>Engineer — Skip</strong></li> <li><strong>SOC/IR — Skip</strong></li> <li><strong>Leader — Plan:</strong> If your org uses DeepSeek or any of the flagged firms, assess vendor risk now before a formal blacklist forces an abrupt cutover; track regulatory status this quarter to avoid a rushed transition.</li> </ul>