Software supply chain attacks pose huge dangers - here's how to bolster your defenses

image via TechRadar

December 29, 2025, 4:20 PM

• •65% of organizations experienced a supply chain attack in the past year.
• •95% of organizations leverage AI tools for software development.
• •Only 24% of organizations analyze AI-generated code for security risks.
• •Organizations with robust compliance controls have faster remediation times.
• •Manual monitoring is considered insufficient, while automatic continuous monitoring is more effective.

A new report reveals that software supply chains are increasingly vulnerable, with two-thirds of organizations experiencing attacks in the last year. These attacks include malicious dependencies, unpatched vulnerabilities, and malware injections, exacerbated by the rapid adoption of AI in software development, where security verification lags. The report emphasizes the importance of compliance and automation for faster security response times, with organizations using multiple compliance controls acting on critical vulnerabilities significantly faster. To bolster defenses, the report suggests prioritizing compliance and automation.

Read original article