Unsigned container images amplify AI supply‑chain risk
As AI workloads now ship model weights and runtimes as OCI artifacts, traditional vulnerability scans miss malicious payloads. The New Stack shows how an unsigned PyTorch model on Hugging Face opened a reverse shell, proving that without cryptographic signing the container supply chain is wide open. Teams must make image signing default.