--- title: Exploiting the supply chain - Niall Merrigan - NDC... description: Supply chain attacks are evolving beyond traditional code injection to exploit human trust and AI systems. Attackers use vendor email compromise to steal... canonical: https://daily.dev/posts/exploiting-the-supply-chain---niall-merrigan---ndc-manchester-2025-qmoz7lxiz twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Exploiting the supply chain - Niall Merrigan - NDC Manchester 2025 | daily.dev og:description: Supply chain attacks are evolving beyond traditional code injection to exploit human trust and AI systems. Attackers use vendor email compromise to steal... og:url: https://daily.dev/posts/exploiting-the-supply-chain---niall-merrigan---ndc-manchester-2025-qmoz7lxiz og:image: https://api.daily.dev/og/posts/Qmoz7lxiz.png og:image:alt: Exploiting the supply chain - Niall Merrigan - NDC Manchester 2025 og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Exploiting the supply chain - Niall Merrigan - NDC Manchester 2025 **[NDC Conferences](https://daily.dev/sources/ndc)** · 61 min read · 1 upvotes · 0 comments ## Summary Supply chain attacks are evolving beyond traditional code injection to exploit human trust and AI systems. Attackers use vendor email compromise to steal credentials and redirect payments, deep fakes for impersonation in video calls, and malicious LLMs to automate phishing and malware creation. AI agents are vulnerable to cross-prompt injection attacks that trick them into leaking data or performing unauthorized actions. Recent incidents include the SolarWinds breach, North Korean job applicants using AI to pass interviews, and attacks condensing six-month campaigns into six hours using AI assistance. Defenders must share vulnerability information, keep humans in the loop with AI systems, and test security boundaries proactively. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [CISO's Expert Guide To AI Supply Chain Attacks](https://daily.dev/posts/ciso-s-expert-guide-to-ai-supply-chain-attacks-cccejpkqf) · The Hacker News · 0 upvotes · 0 comments - [Modern supply-chain attacks and their real-world impact](https://daily.dev/posts/modern-supply-chain-attacks-and-their-real-world-impact-goucs5roh) · CSO Online · 0 upvotes · 0 comments - [The software supply chain is the new battlefield. AI just changed the rules.](https://daily.dev/posts/the-software-supply-chain-is-the-new-battlefield-ai-just-changed-the-rules--mtuqueyhv) · The New Stack · 1 upvotes · 0 comments --- Tags: [#ai](https://daily.dev/tags/ai), [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber), [#llm](https://daily.dev/tags/llm), [#supply-chain](https://daily.dev/tags/supply-chain) [View this post on daily.dev](https://daily.dev/posts/exploiting-the-supply-chain---niall-merrigan---ndc-manchester-2025-qmoz7lxiz) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Exploiting the supply chain - Niall Merrigan - NDC Manchester 2025","url":"https://daily.dev/posts/exploiting-the-supply-chain---niall-merrigan---ndc-manchester-2025-qmoz7lxiz","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/exploiting-the-supply-chain---niall-merrigan---ndc-manchester-2025-qmoz7lxiz"},"datePublished":"2026-02-03T14:07:42.494Z","dateModified":"2026-02-03T14:08:05.055Z","description":"Supply chain attacks are evolving beyond traditional code injection to exploit human trust and AI systems. Attackers use vendor email compromise to steal...","image":"https://i.ytimg.com/vi/vhW1-fURxcc/sddefault.jpg","thumbnailUrl":"https://i.ytimg.com/vi/vhW1-fURxcc/sddefault.jpg","isAccessibleForFree":true,"articleSection":"NDC Conferences","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"NDC Conferences","logo":"https://media.daily.dev/image/upload/s--SiIyojEj--/f_auto/v1748760369/logos/ndc","url":"https://daily.dev/sources/ndc"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/exploiting-the-supply-chain---niall-merrigan---ndc-manchester-2025-qmoz7lxiz","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ai,security,cyber,llm,supply-chain","timeRequired":"PT61M","video":{"@type":"VideoObject","name":"Exploiting the supply chain - Niall Merrigan - NDC Manchester 2025","description":"Supply chain attacks are evolving beyond traditional code injection to exploit human trust and AI systems. Attackers use vendor email compromise to steal...","thumbnailUrl":"https://i.ytimg.com/vi/vhW1-fURxcc/sddefault.jpg","uploadDate":"2026-02-03T14:07:42.494Z","duration":"PT61M","url":"https://api.daily.dev/r/Qmoz7lxiz","embedUrl":"https://www.youtube.com/embed/vhW1-fURxcc"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"NDC Conferences","item":"https://daily.dev/sources/ndc"},{"@type":"ListItem","position":3,"name":"Exploiting the supply chain - Niall Merrigan - NDC Manchester 2025"}]} ```