Security Vibe Check - Which Malware Are You?

Discover your security persona in this engaging 31-minute conference talk that combines humor with serious cybersecurity education through an interactive quiz format. Learn about supply chain security vulnerabilities by exploring real-world attacks like log4j and xz utils incidents, while determining which type of security threat matches your current development practices. Examine common security pitfalls including typosquatted packages, backdoor vulnerabilities, and dependency management issues through relatable examples and case studies. Gain practical advice on improving security posture, understanding when lockfiles provide protection, and implementing Software Bill of Materials (SBOM) practices. Explore the spectrum of security behaviors from chaotic dependency management to proactive threat detection, with actionable strategies to avoid becoming the next trending security disaster in the open source ecosystem.