Open supply software program underpins just about each fashionable utility. That ubiquity is a superpower for builders, however it’s also an increasing assault floor. Software program provide chain assaults have been as soon as uncommon however at the moment are occurring each day, with malicious actors exploiting the belief builders place in public registries, package deal managers, and CI/CD pipelines.
Chainguard is a safe software program provide chain platform. The corporate began with hardened container photographs and has expanded to cowl domains together with VMs, language libraries, GitHub Actions, and agent abilities.
Matt Moore is a co-founder and CTO of Chainguard, and a veteran of Google’s open supply, container, and safety infrastructure work. On this episode, Matt joins Gregor Vand to debate classes from current provide chain assaults, why CI/CD pipelines at the moment are a major assault floor, the problem of significant software program inventories, the EU Cyber Resilience Act, and what the arrival of Anthropic’s Mythos mannequin means for the tempo of vulnerability discovery and the urgency of patching at machine pace.
Sponsorship inquiries:
[email protected]
