AI Package Hallucination - A New Supply Chain Attack Technique to Watch - Seguridad Mania.com - España y América Latina

The Vulcan Cyber Voyager18 team recently discovered a new attack technique that enables threat actors to spread malicious code packages using generative AI tools. We named this technique "AI package hallucination" after identifying that in 30% of the cases in our research ChatGPT-3.5 recommended a non-existent software package or library that could be manipulated by threat actors to initiate a new type of software supply chain attack. Attend this webinar to learn about AI package hallucinations and explore our PoC.