> Markdown version of [/events/world-congress-2026-europe/sessions/995-defending-the-modern](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/995-defending-the-modern). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Defending the Modern Supply Chain: Hands-On Vulnerability Remediation


- **Date:** Thursday, Jul 9, 2026
- **Time:** 10:30–12:30 (120 min)
- **Room:** Room M3 (18 Seats)
- **Event:** World Congress 2026 Europe

## Description

Software supply chains grow more complex every day, bringing new risks from open-source dependencies. Join us for a comprehensive workshop designed to help you defend your applications against these threats using secure coding practices and modern tools.
The session kicks off with a live demonstration of a real-world application exploit. You will see firsthand how to block malicious packages using a package firewall and remediate vulnerabilities using Software Composition Analysis (SCA) techniques.
After the demo, we will dive into a hands-on exercise. We provide a vulnerable application so you can practice identifying security flaws with SCA tools. We will apply the necessary fixes and re-scan the application to validate your remediation work. We will wrap up the workshop with an open Q&A session. Here, we will discuss best practices for securing your supply chain and share actionable tips for integrating security directly into your development workflows.

## Speakers

### [Boy Baukema](https://www.wearedevelopers.com/@boy-baukema)

Senior Principal Security Consultant at Veracode
### [Patrick Feige](https://www.wearedevelopers.com/@patrick-feige)

Veracode


## Related talks at this congress

- [Beyond SBOMs: The Future of Container Supply Chain Security](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1266-beyond-sboms-the) — Mohammad-Ali A'râbi
- [From Build to Breach: Hacking Kubernetes Through the Supply Chain](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1210-from-build-to-breach) — Ali Alp
- [The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1280-the-developer) — Marcus Wermuth
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1442-checkmate-5-real) — Jasmin Azemović