Attacking Through the Software Supply Chain

This talk surveys attacks that exploit dependencies and third-party software, using real-world examples to explain the attack surface. It then discusses frameworks and guidelines organizations can use to reduce exposure.