The Internet is Broken: Breaking Down the Software Supply Chain

Explore the critical shift in software development and its impact on security in this DevConf.CZ 2023 conference talk. Delve into the anatomy of recent supply chain attacks, examining how hackers exploit vulnerabilities in modern software building blocks such as frameworks, open-source libraries, SaaS platforms, and cloud infrastructure. Gain insights into the methods used to turn open-source libraries malicious, breach systems, and exploit leaked infrastructure credentials. Learn actionable steps to build secure applications in an insecure internet environment and regain control of your security posture.