How AI security failures are endangering your supply chain - and what you can do - ZDNET

Why it matters

ZDNet reports on Black Kite's study of the AI supply chain, which examined thousands of AI companies worldwide and found widespread failures in basic security practices. The research covered firms of all sizes across categories such as application development, specialized sectors like healthcare and finance, industrial organizations, and AI foundations. Black Kite found that a large share of suppliers had at least one critical unpatched vulnerability, and many showed email authentication weaknesses, heightened ransomware exposure, and suspicious network or botnet-related activity. The article explains why this matters: most enterprise AI solutions are purchased rather than built, and every integration an AI tool brings into a corporate ecosystem can expand the attack surface. Suppliers often hold access to customer data and infrastructure, so stolen credentials can expose clients to attack. Black Kite recommends continual monitoring, prioritized remediation of actively exploited flaws, and auditing AI tools' integrations, access, and data reach before and during adoption.