Supply Chain Vulnerabilities Linked to AI Security Risks

As artificial intelligence (AI) technologies continue to evolve, they bring along notable security weaknesses that can significantly affect supply chains. Researchers, particularly from Black Kite, highlight a troubling trend among AI providers that could jeopardize business operations.

Understanding AI Security Issues

The promise of AI technology in enhancing operational efficiency does not equate to inherent security. In the study titled “2026 AI Supply Chain Report: The Risks Behind Your AI Relationships,” Black Kite analyzed 18,160 AI companies across various sectors. Their findings reveal that many of these businesses are encountering serious challenges in implementing essential security measures.

Key Findings from the Study

• Unpatched Vulnerabilities: Over one-third (34.2%) of the companies examined were found to have at least one critical vulnerability that was not addressed, raising significant security concerns.
• Email Security Issues: A staggering 61.7% of AI companies faced DMARC issues, while 37.3% exhibited weaknesses in DKIM, creating potential risks for phishing attacks.
• Ransomware Exposure: Nearly 30% (29.7%) of the firms are particularly vulnerable to ransomware, suggesting many AI suppliers operate under conditions that expose them to heightened risks.
• Network Anomalies: An investigation reported unusual network activities in 44.3% of organizations, with botnet activity detected in 41.8%.

The Importance of Addressing AI Supplier Risks

Investments in AI are rapidly increasing, with enterprise spending on these technologies reaching approximately $37 billion in 2025. A significant portion of these funds (76%) is directed toward purchasing AI applications instead of developing them in-house. Despite this investment, improper handling of AI integration can pose serious risks to businesses, affecting user experiences and increasing potential attack surfaces.

As Black Kite illuminates, the vulnerabilities present in AI suppliers can have dire consequences, as these companies often access sensitive customer data and critical business infrastructures. If a supplier's credentials are compromised, it can lead to various types of cyberattacks impacting their clients.

Suggested Actions for Businesses

Protection against AI-related supply chain risks is paramount. Businesses must engage in ongoing monitoring and assessment of their suppliers to uncover potential security issues. Black Kite advises that a single security evaluation is not enough; continual vigilance paired with a comprehensive understanding of supplier technologies and dependencies can effectively mitigate risks.

When vulnerabilities are identified, it is vital to prioritize addressing them based on potential risks, starting with those related to ransomware. Organizations should also perform audits on AI tools used, analyzing their integrations, data access permissions, and the potential impact if an exploitation were to occur.

Understanding the risk-reward relationship for AI tools is critical. Businesses should make informed decisions on whether to retain a tool based on its potential exposure. If a decision to continue using a tool is made, organizations should restrict its permissions, limiting access to the minimum necessary for operational functionality.

These proactive measures can help businesses not only safeguard their digital supply chains but also ensure a more secure operational environment in the face of evolving AI technologies.