Modern software relies 96% on fragile open-source foundations, often maintained by unpaid volunteers. This talk explores the rising threat of supply chain attacks, detailing recent exploits like stolen PATs, hijacked tags, and compromised runners. We will share tactical defenses, like dependency pinning and non-human identity monitoring, to lock down your infrastructure and outline an architectural vision for a Secure SDLC to shift security left.
Bio:
Sean Juroviesky is a dedicated cybersecurity, risk management, and privacy advocate; speaking on those topics at conferences across the world including DEF CON, CypherCon, CornCon, BSides Rochester, SecretCon, Sec-T, and more. Sean also acts as a cybersecurity architect for a large music streaming provider. Beyond her professional pursuits, Sean finds joy in backpacking through the mountains with her adventurous Australian Shepherd, partner, and twins, embracing the serenity of nature and the thrill of exploration.