New research provides a stark look at the AI supply chain and the risks it brings to businesses.
Artificial intelligence companies worldwide are bringing a new wave of vulnerabilities and security issues to the digital supply chain, researchers warn.
According to a new report published by Black Kite on Tuesday, there now exists a “widespread cybersecurity weakness” across the “rapidly expanding ecosystem of companies developing, deploying, and supporting artificial intelligence.”
AI and smart solutions don’t automatically equate with safe solutions. In a study titled “2026 AI Supply Chain Report: The Risks Behind Your AI Relationships,” Black Kite says that many AI suppliers — the companies that develop and deploy AI services to today’s businesses — are struggling with “basic security practices.”
Also: Rogue AI incidents hit ‘tens of thousands’: Can businesses trust these tools?
According to the research, after examining the companies themselves, along with their software, integrations, and components, researchers found failures to patch critical vulnerabilities, protect credentials, authenticate users and email, and address network security issues.
The study analyzes 18,160 AI companies worldwide, ranging from 0-10 employees to more than 1,000 employees. A company’s AI involvement was determined through reviews of company products and services and primary business activities, covering six broad groups: everyday application development; AI development and implementation; AI applications in specialized sectors such as healthcare, IT, and finance; industrial organizations; and AI foundations working on data, compute, and modeling.
A small percentage of assessed companies are considered “unclassified,” and the study excluded businesses that use AI only incidentally.
Source link







