Thursday, October 30 @ 12-1pm ET
Anatomy of a Software Supply Chain Attack
Lessons from Real-World Compromises Across the SDLC
From customer data exfiltrated with the Salesloft/Drift compromise to two of the largest open-source attacks seen last month with Shai-Hulud and the Qix NPM Compromise, it’s been a hard couple of months for software supply chain security. In fact, we have seen 5 of the top 10 npm packages being compromised in just the last few weeks.
It’s clear that trust model is broken.
Join this webinar to dive into the anatomy of real-world software supply chain attacks. We will break down how these attacks unfolded on different parts of the software pipeline – from open source packages, to the tooling used to code and build software, to package and repositories. We will discuss why traditional defenses often fail and what proactive measures can balance resilience with software delivery.
You will learn:
- What happened at each stage of the attack
- What made each attack different and difficult to detect
