Traditional SBOMs fail for AI. Learn how to generate CycloneDX 1.5 Artificial Intelligence Bill of Materials (AI-BOMs) to track model provenance, licenses, and architecture for EU AI Act compliance.
A practical guide to detecting Shadow AI infrastructure. Learn how to audit developer workstations and CI/CD runners for unvetted models hidden in the ~/.cache/huggingface directory.
A technical analysis of why transitioning from Pickle to SafeTensors and GGUF does not entirely eliminate supply chain risks. Learn how attackers weaponize JSON headers and metadata.