In supply chain cyberattacks, AI is being used to fight AI

In mid-August, Uber Freight revealed a cybersecurity incident involving unauthorized entree to a information of its systems and data.

Days prior, Ceva Logistics, a subsidiary of CMA CGM, reported a information breach that affected galore companies and leaked their customers' individual information. Weeks earlier that, Coca-Cola's dairy marque Fairlife was deed by a ransomware attack, prompting the institution to temporarily suspend its US operations.

Concerns astir proviso concatenation hacks are only growing, "as we do much and much intelligent things pinch these computers and arsenic much and much they're becoming the encephalon of an autonomous system," Said Ouissal, the laminitis & CEO of the edge-computing software institution ZEDEDA, told Business Insider.

Warehouses and plants are adopting AI technologies for illustration trackers connected trucks and forklifts, cameras and somesthesia sensors wrong facilities, laptops and tablets, and GPS systems. As they do, they're becoming much susceptible to cybersecurity incidents, said Bart Bullard, the main exertion serviceman of Source Logistics, a warehousing, fulfillment, and proscription provider.

It's a catch-22: the very technologies that proviso concatenation operators usage to enactment competitory are besides "vectors of entry" for hackers to summation entree to institution systems, Bullard said.

As proviso concatenation executives grapple pinch this progressively communal challenge, they're besides uncovering that AI tin beryllium a portion of the solution, Ouissal said.

What's astatine liking successful a proviso concatenation cyberattack

When a information breach occurs, companies will unopen down their systems until they tin place the root of the issue. That tin return an mean of 247 days, according to an IBM study this year.

Supply concatenation attacks are peculiarly problematic because a information breach that suspends operations tin disrupt the timing of the full proviso chain. Production is delayed and products could expire, Bullard said.

That's what happened erstwhile Jaguar Land Rover was deed by a cyber onslaught past fall. Production halted for six weeks. During the shutdown, suppliers mislaid work, and immoderate mini companies went retired of business, said Liz James, a managing information advisor astatine cybersecurity patient NCC Group.

Attacks besides hap wrong the package proviso chain, Ouissal said. A bad character hacks a portion of software, which past gets distributed to aggregate businesses operating robots. The consequence is malware moving the bots.

This type of onslaught was disclosed past period by CloudSEK and Hudson Rock. The groups revealed that a package proviso concatenation onslaught poisoned the open-source instrumentality LiteLLM successful March 2026. The information breach exposed unreality keys, credentials, and terabytes of information crossed much than 2,500 organizations.

Preventing cyberattacks and responding pinch AI

Fighting cyberattacks successful the proviso concatenation requires some preventing and responding to them — often pinch the assistance of AI-enabled tools, arsenic good arsenic quality training and expectation-setting, Ouissal said.

Companies usage AI to scan package and observe hidden vulnerabilities that humans haven't noticed. AI devices are programmed to observe oddities that deviate from modular patterns. If there's an unexpected issue, the institution tin instantly deploy a patch to forestall hackers from exploiting the vulnerabilities.

Bob Krohn, a partner and manufacturing believe co-leader astatine consulting patient ISG, said it's important to train labor connected cybersecurity champion practices, from the C-suite and white-collar supervisors to the shop floor. Workers should beryllium trained to spot phishing scams, and labor pinch captious strategy entree should usage password managers, Bullard said.

"Everyone successful an endeavor must go AI-security guardant thinkers," Bullard said. He added that detecting attacks is progressively challenging, arsenic deepfake videos and sound calls go much sophisticated, and AI becomes much convincing astatine emulating behavior. The accustomed tells of a phishing scam — for illustration overseas grammar and misspelled words — vanish pinch the thief of AI, Bullard said.

Cyber attacks successful the proviso concatenation are besides changing really businesses attack supplier contracts and audits, James said.

Twenty years ago, galore businesses were accustomed to buying the aforesaid parts from the aforesaid suppliers for decades, according to Krohn. Now, companies thin to person diversified suppliers to negociate risks for illustration tariffs. Each clip they activity pinch different business, they person to consider caller cyber threats, since these entities tin position business information and inventory levels, Krohn said. While firewalls exist, location are still gaps that a bad character could exploit.

"You are opening yourselves up to cyber consequence successful an exponential way," Krohn said. He added: "Choose your proviso concatenation partners carefully. Make judge that they person the aforesaid benignant of accent connected cyber policies arsenic you do."

That said, not each attacks tin beryllium proactively prevented. "All our C-suite clients admit that they are going to get hacked," Krohn said. That's why executives are focused connected having plans successful spot to respond to a cyberattack.

Battling cyberattacks pinch the thief of AI is captious because hackers utilizing AI tin excavation package codification for vulnerabilities overmuch faster than a quality can, said Bullard.

"Fighting AI pinch AI is the only existent avenue," Bullard said.