This week we discuss the reality of the software supply chain, ways to secure your infrastructure, and a picture that contains its own MD5 hash.