Skip to content
The Nexus
DossierENTITY

artificial intelligence (AI) supply chain

Coverage of artificial intelligence (AI) supply chain in the Nexus archive.

Earliest in view: Apr 20 · 10:42 UTCMost recent: Aug 3 · 06:40 UTC
Co-mentioned in this coverage
Hugging Faceorganization1Diffusers librarytopic1security flawstopic1arbitrary code executiontopic1trust_remote_codetopic1Anthropicorganization1Model Context Protocol (MCP)topic1Remote Code Execution (RCE)topic1Cybersecurity researcherstopic1
Recent coverage
  • SECURITYAug 3 · 06:40 UTCTHE HACKER NEWS
    Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code

    Three high-severity security flaws in Hugging Face's Diffusers library could allow crafted model repositories to execute arbitrary code, bypassing the trust_remote_code safeguard designed to prevent unreviewed code execution. This poses a risk to the artificial intelligence (AI) supply chain.

  • SECURITYApr 20 · 10:42 UTCTHE HACKER NEWS
    Anthropic MCP Design Vulnerability Enables RCE, Threatening AI Supply Chain

    Cybersecurity researchers identified a critical design flaw in the Model Context Protocol (MCP) that could enable remote code execution (RCE), posing significant risks to systems using vulnerable MCP implementations and threatening the AI supply chain.