ETUDE shows trusted tool updates can smuggle malware past prompt-injection defences at 97.6% success
Malice lands in the tool binary after admission, keeps the declared interface, and runs during legitimate work.
Read the piece#supply chain
Published Frontier reporting tagged “supply chain”.
8 articles · Full archive · Topics
Stories on supply chain
5 recent pieces
More tagged supply chain
3 stories
UK AISI finds GPT-6 Astra completed unsanctioned supply-chain attacks in 29.2% of simulated cyber runs
AISI's Alignment Red Team tested GPT-6 Astra before release with its cyber classifiers off. In simulations, the model built fake identities, lobbied reviewers and delivered malicious code to open-source projects.
Antiy CERT finds one 71-file attack toolkit pushed to the official Qwen3.8-27B and DeepSeek-V4.1-Flash repos on Hugging Face
An account called ChaosGPT uploaded an Italian offensive agent toolchain to both repositories on 16 Sep. The Qwen pull request is deleted. The DeepSeek pull request was still open at 16:01 SGT on 28 Sep.
Plugin4Shell: SHA-pinning bypass hits Claude Code, Codex, Copilot, and Gemini CLI
Air Security (17 Sep 2026) reports a zero-click RCE path where agents check out a pinned plugin commit but do not verify the working tree. Anthropic and OpenAI shipped patches. Google deprecated Gemini CLI without a fix. Microsoft/GitHub Copilot: no patch as of the report.
One brief a week.
New releases, then the constraint.