LIVE DEMO - Supply Chain Attack in the Terraform Registry

Learn about supply chain security vulnerabilities in this 47-minute conference talk that demonstrates a live attack on the Terraform Registry. Discover how Terraform, the leading Infrastructure as Code (IaC) tool managing billions of dollars in enterprise infrastructure, contains a critical security flaw in its Registry system that allows malicious code injection without user detection. Watch as the presenter performs a real-time demonstration of stealing enterprise credentials through a compromised Terraform module, exposing how module authors can exploit the Registry's security weaknesses. Understand the mechanics of supply chain attacks in the DevOps ecosystem and gain insights into the risks associated with using community modules from the Terraform Registry, ultimately learning why this security vulnerability poses a significant threat to enterprise infrastructure management.