S2W presents supply chain attack cases, AI detection at VB 2026
A researcher from the South Korean security firm detailed an attack that hijacked PoC code used to verify vulnerabilities, and presented an AI system that traces its execution.
S2W presented software supply chain attack cases and an AI-based detection system at Virus Bulletin 2026 (VB 2026), held in Seville, Spain, according to dailysecu.com.
On the third day of the conference, a principal researcher at S2W's integrated analysis lab detailed a supply chain attack targeting security researchers' vulnerability verification. The attack copied proof-of-concept (PoC) code used for vulnerability verification and altered dependency settings and code so that a malicious package was installed alongside the researcher's development environment setup.
S2W also disclosed an AI-based detection system that traces the full execution path of the attack and automatically analyzes anomalies in package information and dependency structure to identify high-risk cases.
Virus Bulletin has held the VB conference since 1991, and the event is widely treated as a leading venue for malware research and threat intelligence.
Quick answers
Where was Virus Bulletin 2026 held?
VB 2026 took place in Seville, Spain, where S2W presented on software supply chain attacks and AI-based detection.
What kind of attack did S2W describe?
An attack that copied PoC code used for vulnerability verification and altered dependency settings and code so a malicious package was installed with the researcher's development environment setup.