When AppSec Scanners Become a Supply Chain Attack Vector

Researchers have discovered a potential vulnerability in the software supply chain, where embedded security scanners can be compromised and used as a starting point for further attacks. This could allow attackers to gain a foothold and launch downstream attacks. The research highlights the risk of security scanners being turned against the organizations that use them.