Paul McCarty
Why conventional SCA, SAST, and EDR tools fail against malicious npm packages and how attackers exploit registries.
npmsoftware-supply-chainopen-source-malware+2
software-supply-chain
114 talks tagged with this topic.
Filters+
Loading filters…
1–24 of 114 talks · loading…
BalCCon2k25·26 min
Vladimir Slavov
Industry experts analyze emerging threats surrounding Vladimir Slavov - OpenChain, Towards a More Secure and Compliant Software Supply Chain.
software-supply-chainvladimirslavov+1
Black Hat·30 min
Industry experts analyze emerging threats surrounding Broken Links: Emergence and Future of Software-Supply Chain Compromises.
software-supply-chainbrokenlink+2
Black Hat·30 min
Analysts investigate attack surfaces and defenses concerning Transparency in the Software Supply Chain: Making SBOM a Reality.
sbomsoftware-supply-chaintransparency+2
Community Stage·53 min
Tom Berek · Farid Zakaria · D Baker
Explores how Nix and NixOS provide reproducible software builds, declarative dependency management, and SBOM traceability across homelabs and enterprise environments.
nixossupply-chainsoftware-supply-chain+2
Community Stage·53 min
Tom Berek · Farid Zakaria
Tom Berek and Farid Zakaria dive into reproducible builds, Nixpkgs dependency isolation, and SBOM verification using Nix and NixOS.
nixossupply-chainsoftware-supply-chain+2
Creator Stage·29 min
Tanya Janca
Advocates for treating secure software code as vital critical infrastructure, bridging application security practices with public policy reforms.
appsecpolicysoftware-supply-chain+2
CyberRisk TV·17 min
Theresa Lanowitz
Theresa Lanowitz explores The Software Supply Chain and Cybersecurity.
software-supply-chainsupplychain
Eye on Tech·23 min
Analysts investigate attack surfaces and defenses concerning IT Ops Query: JFrog ML CTO on enterprise AI software supply chain security.
aisupply-chainsoftware-supply-chain
Eye on Tech·28 min
Brett Smith
Industry experts analyze emerging threats surrounding IT Ops Query: Tales from the trenches of software supply chain security.
software-supply-chainquerytale+2
Eye on Tech·23 min
Security researchers examine technical aspects of JFrog ML CTO on enterprise AI software supply chain security.
aisupply-chainsoftware-supply-chain
Eye on Tech·28 min
Brett Smith
Presenters detail vulnerability discovery and exploitation in Tales from the trenches of software supply chain security.
software-supply-chaintaletrenche+2
FIRST·27 min
Security researchers examine technical aspects of Building Trust Through Proactive Security - Key Parts of the Trusted Software Supply Chain.
software-supply-chainbuildingtrust+2
IEEE Symposium on Security and Privacy·18 min
Security researchers examine technical aspects of On the Importance and Challenges of Reproducible Builds for Software Supply Chain Security.
software-supply-chainimportancechallenge+2
Main Stage·38 min
Maksim Shudrak
Provides an in-depth breakdown of discovering and neutralizing the historic XZ Utils backdoor (CVE-2024-3094) before stable Linux distribution deployment.
supply-chainsoftware-supply-chainbackdoor+2
Main Stage·38 min
Maksim Shudrak
Provides an insider breakdown of detecting and neutralizing the historic XZ Utils backdoor (CVE-2024-3094) before widespread Linux distribution deployment.
supply-chainsoftware-supply-chainbackdoor+2
Microsoft Security Response Center (MSRC)·26 min
Presenters detail vulnerability discovery and exploitation in BlueHat 2026: Double-edged AI: Securing the software supply chain in the autonomous era.
aisupply-chainsoftware-supply-chain
Microsoft Security Response Center (MSRC)·33 min
Presenters detail vulnerability discovery and exploitation in BlueHat v18 || software supply chain attacks in 2018 - predictions vs reality.
software-supply-chainsupplychain+1
OWASP Foundation·32 min
Nicklas Körtge
Nicklas Körtge examines Cryptographic Governance: Software Supply Chain Security With CBOM.
supply-chaingovernancesoftware-supply-chain
OWASP Foundation·54 min
Eylam Milner · Mor Weinberger
Eylam Milner examines Exhibitor: Benchmarking the Security of Your Software Supply Chain.
supply-chainsoftware-supply-chainexhibitor+1
OWASP Foundation·39 min
Vandana Verma
Vandana Verma examines Exhibitor: Software Supply Chain Security.
supply-chainsoftware-supply-chainexhibitor+2
OWASP Foundation·48 min
Paul McCarty
Paul McCarty investigates Hacking the software supply chain one developer at a time.
supply-chainsoftware-supply-chainsupply+2
OWASP Foundation·19 min
JC Herz
Engineers explore architecture and security mechanisms for Measure and Improve Software Supply Chain Assurance with OWASP SCVS Steve Springett & JC Herz.
supply-chainowaspsoftware-supply-chain
PROIDEA Events·42 min
Artur Kuliński
Artur Kuliński details CONFidence 2021: Software Supply Chain Security - why and how to protect our....
software-supply-chainconfidencesupply+1