AppSec Scanners Can Be Weaponized for Supply Chain Attacks

New research reveals that application security scanners integrated into the software supply chain can be exploited as attack vectors. Attackers can compromise these tools to gain footholds for downstream attacks. The findings highlight a growing risk in automated security tooling.