DeveloperWeek Management 2024 + AI DevSummit 2024 (+ DW Europe/LATAM 2024)

Mackenzie Jackson, GitGuardian, Developer and security advocate

Take a step into the world of black hat hacking groups and follow them step by step through a supply chain attack.

Software supply chain attacks have forever changed the security landscape, enabling attackers to target more victims with increasingly sophisticated attacks. But how do these supply chain attacks unfold in reality? This talk reviews high-profile attacks and then recreates the steps through a series of live demos to uncover and unmask how supply chain attacks unfold and how we can prevent them. We focus on three methods of attacking the supply chain:
Attacking the CI/CD pipeline
Breaching the version control systems (VCS)
Poisoning open-source dependencies
Abusing AI package hallucinations

At the end of the presentation, we'll synthesize our findings into effective