> Markdown version of [/events/world-congress-2026-north-america/sessions/1761-ai-vs-ai-defending](https://www.wearedevelopers.com/events/world-congress-2026-north-america/sessions/1761-ai-vs-ai-defending). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# AI vs. AI: Defending the open source supply chain with agentic workflows


- **Event:** World Congress 2026 North America

## Description

With the arrival of Mythos and other frontier models we enter a new world. They can find security issues in libraries, create individual exploits, and successfully chain them to real-world attack campaigns in 2026. The open source ecosystem is on the verge of something new. What happens next is terrifying and exciting at the same time. At Chainguard we started a coalition with many partners across governments, banks and other large corporations, foundations, and open source communities to use the tools to strengthen our defenses against attackers. We established trust and infrastructure to share exploits, create patches, and bring them to use as binaries. Just in our first weeks we processed over thousands of findings, created well over 1k patches, and touched the code base of hundreds of open source projects. Now it is a few months later, and Manfred will share our experience from working within and outside the project. We will talk about good findings, bad patches, and ugly consequences alike, and dive into the details of examples and our collaboration with open source projects, communities, and their users. Manfred will also talk about the machinery behind the scenes that enables patching at the necessary scale - Chainguard Factory, powered by our open source agentic framework DriftlessAF, and expert engineers assisted by powerful AI models.

## Speaker

### [Manfred Moser](https://www.wearedevelopers.com/@manfred-moser)

Senior Principal DevRel Engineer at Chainguard


## Related talks at this congress

- [On the Public Clock: Open-Source Defense When You're Not in the Club](https://www.wearedevelopers.com/events/world-congress-2026-north-america/sessions/1683-on-the-public-clock) — Nicholas Muy
- [Securing AI Agent Infrastructure: Identity, Attestation, and Trust at Scale](https://www.wearedevelopers.com/events/world-congress-2026-north-america/sessions/1432-securing-ai-agent) — Abdel Fane
- [Building Stuff with GenAI - The Open Minded Workshop beyond OpenAI](https://www.wearedevelopers.com/events/world-congress-2026-north-america/sessions/1719-building-stuff-with) — Andreas Erben
- [Agentic Drift: keeping pace with your agents](https://www.wearedevelopers.com/events/world-congress-2026-north-america/sessions/1739-agentic-drift) — John Coghlan

## Watch remotely

Can’t make it to San José? Watch this session live with Pro. You also get:

- All full videos, bookmarks, and playlists
- World Congress livestreams

[See pricing](https://www.wearedevelopers.com/pricing)

## Links

- [Get tickets](https://www.wearedevelopers.com/world-congress-north-america/tickets)