> Markdown version of [/events/world-congress-2026-europe/sessions/1210-from-build-to-breach](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1210-from-build-to-breach). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# From Build to Breach: Hacking Kubernetes Through the Supply Chain


- **Date:** Friday, Jul 10, 2026
- **Time:** 09:00–09:30 (30 min)
- **Room:** Stage 8 - powered by Red Hat
- **Event:** World Congress 2026 Europe

## Recording

[Watch recording](https://www.wearedevelopers.com/videos/100183-from-build-to-breach-hacking-kubernetes-through-the-supply-chain)

## Description

The next generation of Kubernetes breaches won’t start in your cluster — they’ll start in your build pipeline. In this session, we’ll follow a realistic attack chain that begins with a compromised dependency and ends with a live DNS-based exfiltration inside a Kubernetes cluster. Step by step, through live demos, we’ll see how a single poisoned package can slip through CI/CD, sneak into an image registry, and quietly abuse CoreDNS to leak secrets. Then we’ll flip the script and show how to stop it using open-source, CNCF-hosted tools like Kyverno, Sigstore, and Falco. You’ll leave with a clear mental model of how supply-chain weaknesses evolve into cluster compromises — and a practical checklist of defenses you can apply today.

## Speaker

### [Ali Alp](https://www.wearedevelopers.com/@ali-alp)

Distinguished Software Architect at Brainlab


## Related talks at this congress

- [Beyond SBOMs: The Future of Container Supply Chain Security](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1266-beyond-sboms-the) — Mohammad-Ali A'râbi
- [Defending the Modern Supply Chain: Hands-On Vulnerability Remediation](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/995-defending-the-modern) — Boy Baukema, Patrick Feige
- [Teaching Kubernetes Security in your Cluster](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/940-teaching-kubernetes) — Thomas Fricke
- [Building a Better Tomorrow: Tips and Tricks for Docker Builds](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1000-building-a-better) — Daniel Bodky