# SE Radio 729: Garth Mollett on AI Supply Chain Security Red Hat expert discusses emerging threats and solutions in AI supply chains - **Source:** [Software Engineering Radio - The Podcast for Professional Software Developers](https://brifing.si/source/45a0c92c-2388-493f-9768-fa13bb6ed2f8) - **Published:** 2026-07-15 - **Topic:** [Data & AI](https://brifing.si/c/data-ai) - **Original article:** - **On Brifing:** https://brifing.si/s/d5409930-5a60-474c-b5be-1eb16907a709 ## Unique Risks in AI Supply Chains Garth Mollett explains how model weights and inference processes create novel vulnerabilities distinct from traditional software supply chains. He highlights model theft and manipulation as critical emerging threats in the AI ecosystem. ## Attacker Motivations and Targets The discussion identifies four primary attack vectors: model weight theft, credential harvesting, system sabotage, and resource hijacking. Mollett emphasizes the growing market for stolen AI models and proprietary training data. ## SPIFFE/SPIRE for Workload Identity The episode explores how SPIFFE/SPIRE frameworks are being adapted for AI workloads to provide secure identity management across distributed systems. These technologies are revolutionizing workload authentication in ML pipelines. ## The AI Equivalent of Reproducible Builds Mollett addresses the current lack of standards equivalent to reproducible builds in traditional software. He stresses the urgent need for verifiable and auditable model training processes in AI development. ## Red Hat's Security Framework Insights into Red Hat's product security team's approach to securing open-source AI components. As a technical advisor, Mollett details their layered defense strategies for enterprise AI deployments. ## Critical Industry Wake-up Call The conversation concludes with a stark warning about AI supply chain security becoming a top cybersecurity priority. Organizations are urged to implement proactive measures before large-scale breaches occur. ## Sources covering this story - https://se-radio.net/2026/07/se-radio-729-garth-mollett-on-ai-supply-chain-security/ — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._