37th Annual FIRST Conference·30 min
Engineers explore architecture and security mechanisms for Routing Security for Enterprises: Secure Your Supply Chain.
routingsupplychain+1
Supply Chain
Dependency and vendor risk, package ecosystems, build and release integrity.
Filters+
Loading filters…
1–24 of 1508 talks / 1526 · loading…
Paul McCarty
Why conventional SCA, SAST, and EDR tools fail against malicious npm packages and how attackers exploit registries.
npmsoftware-supply-chainopen-source-malware+2
BalCCon2k25·26 min
Vladimir Slavov
Industry experts analyze emerging threats surrounding Vladimir Slavov - OpenChain, Towards a More Secure and Compliant Software Supply Chain.
software-supply-chainvladimirslavov+1
Black Hat·36 min
Neelu Tripathy · Lovlesh Malik
Engineers explore architecture and security mechanisms for Beyond the Golden Image: A Self-Healing Image Supply Chain.
goldenimageself-healing+2
Black Hat·30 min
Industry experts analyze emerging threats surrounding Broken Links: Emergence and Future of Software-Supply Chain Compromises.
software-supply-chainbrokenlink+2
Black Hat·21 min
Anusha Penumacha · Srinija Kammari
Engineers explore architecture and security mechanisms for Determining Exploitability of Vulnerabilities with SBOM and VEX.
vulnerabilitiessbomdetermining+2
Black Hat·40 min
Engineers explore architecture and security mechanisms for Hacking the Supply Chain - The Ripple20 Vulnerabilities Haunt Tens of Millions of Critical Devices.
vulnerabilitiesripple20supply+3
Black Hat·26 min
Engineers explore architecture and security mechanisms for How I Learned to Stop Worrying and Love the SBOM.
sbomlearnedstop+2
Black Hat·1 hr 4 min
Matt Tait
Analysts investigate attack surfaces and defenses concerning Supply Chain Infections and the Future of Contactless Deliveries.
supplychaininfection+1
Black Hat·31 min
Engineers explore architecture and security mechanisms for Picking Lockfiles: Attacking & Defending Your Supply Chain.
pickinglockfileattacking+2
Black Hat·38 min
Security researchers examine technical aspects of The Devils in the Dependency Data Driven Software Composition Analysis.
devildependencydriven+1
Black Hat·33 min
Pierre Lee · Vickie Su · Philip Chen
Presenters detail vulnerability discovery and exploitation in The Drone Supply Chain's Grand Siege: From Initial Breaches to Long-Term Espionage.
espionagedronesupply+3
Black Hat·51 min
Security researchers examine technical aspects of The Enemy Within: Modern Supply Chain Attacks.
enemymodernsupply+2
Black Hat·52 min
Analysts investigate attack surfaces and defenses concerning The Irrelevance of K-Bytes Detection - Building a Robust Pipeline for Malicious Documents.
detectionirrelevancek-byte+3
Black Hat·30 min
Analysts investigate attack surfaces and defenses concerning Transparency in the Software Supply Chain: Making SBOM a Reality.
sbomsoftware-supply-chaintransparency+2
Black Hat·29 min
Suguru Ishimaru · Satoshi Kamekawa
Security researchers examine technical aspects of Tropic Trooper Reloaded: Unraveling the Invisible Supply Chain Mystery.
tropictrooperreloaded+3
Black Hat Europe 2025·38 min
Ben Liderman · Maayan Keshet
Analysts investigate attack surfaces and defenses concerning Bootstrapping Trust: From Isolated Build Machines to Enclaved CI Pipelines.
bootstrappingtrustisolated+3
Black Hat Europe 2025·37 min
Rami McCarthy · Amitai Cohen
Engineers explore architecture and security mechanisms for The Forensic Trail On GitHub: Hunting For Supply Chain Activity.
supply-chainforensictrail+3
Briefings·41 min
Varun Sharma · Ashish Kurmi
Incident responders detail the compromise of popular GitHub Actions workflows, tracing malicious pull requests and automated credential harvesting.
ci-cdnetworkexfiltration+2
Briefings·43 min
Colin Estep · Dagmawi Mulugeta
Supply chain compromises like the 2020 SolarWinds breach have shown how devastating and stealthy these attacks can be.
open-sourcewebbypass+2
BSides Canberra 2025·27 min
David Leadbeater
David Leadbeater details Developers, the weakest link in the supply chain?.
developerweakestlink+3
BSides Edmonton·35 min
Nicole Schwartz
Engineers explore architecture and security mechanisms for What exactly is Supply-chain Levels for Software Artifacts (SLSA)?: Nicole Schwartz.
exactlysupply-chainlevel+1
BSides Lisbon·42 min
Lucas Ferreira
Lucas Ferreira investigates [BSL2023] Incident Response in Cases of Supply Chain Incidents.
incident-responsesupply-chainbsl2023+2
BSides Perth·34 min
Sajeeb Lohani · Ben Christian
Security researchers examine technical aspects of 2023: Sajeeb Lohani & Ben Christian: Achieving Supply Chain Security on a Budget.
sajeeblohanichristian+2