# sbom
3 artikelengetagd met “sbom”
Supply chain-aanvallen op agents
AI-agents compromitteren via vergiftigde packages, MCP-servers met een backdoor, kwaadaardige model-registries en geweaponiseerde agent-frameworks -- inclusief de Postmark MCP-inbraak en de NullBulge-campagnes.
agentssupply-chainmcpnpmpoisoningsbomdependencies
Capstone: bouw een tool voor AI-supply chain-beveiliging
Build a tool that scans, audits, and monitors the security of AI/ML supply chains including model provenance, dependency integrity, and artifact verification.
capstonesupply-chainsecurityprovenancesbom
Model Signing and Verification
Defense-focused guide to implementing cryptographic model signing and verification, covering Sigstore for ML, certificate management, SBOM generation for AI systems, and deployment-time verification workflows.
supply-chainsigningverificationsigstoresbomprovenancenistdefense