Supply Chain Attacks in the Terraform Registry - Live Demo

Watch a conference talk from NDC Security that demonstrates a critical security vulnerability in the Terraform Registry through a live supply chain attack demonstration. Learn how module authors can potentially inject malicious code into community modules without detection, putting enterprise infrastructure at risk. Follow along as the speaker executes a proof-of-concept attack to extract enterprise credentials through a compromised Registry module. Gain essential insights into the security implications of using community modules from the Terraform Registry, which is widely used to manage enterprise infrastructure worth billions of dollars. Understand the risks and best practices for protecting your infrastructure-as-code deployments from supply chain attacks.