Supply Chain Security Summit

Software supply chain attacks are rapidly evolving—moving from simple package poisoning to sophisticated campaigns that can lead to full cloud compromise. In this session, we’ll break down how attackers are exploiting modern development ecosystems, targeting developer tools, CI/CD pipelines, and IDE extensions as high-value entry points.

Through real-world case studies, including the s1ngularity and Shai-Hulud campaigns, we’ll analyze attacker techniques and trace how initial access can cascade across code, cloud, and runtime environments. You’ll leave with a clear understanding of today’s supply chain attack paths and practical strategies for building a proactive, unified defense across the modern software stack.

Software supply chain attacks are rapidly evolving—moving from simple package poisoning to sophisticated campaigns that can lead to full cloud compromise. In this session, we’ll break down how attackers are exploiting modern development ecosystems, targeting developer tools, CI/CD pipelines, and IDE extensions as high-value entry points.

Through real-world case studies, including the s1ngularity and Shai-Hulud campaigns, we’ll analyze attacker techniques and trace how initial access can cascade across code, cloud, and runtime environments. You’ll leave with a clear understanding of today’s supply chain attack paths and practical strategies for building a proactive, unified defense across the modern software stack.