WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2026 Europe • Jul 10, 2026 • Session details

From Build to Breach: Hacking Kubernetes Through the Supply Chain

Ali Alp

How does a seemingly harmless NPM package bypass your Kubernetes firewalls? Watch a realistic supply chain attack exploit AI-generated code and DNS tunneling to stealthily extract cluster secrets.

From Build to Breach: Hacking Kubernetes Through the Supply Chain thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

2:36 min

Addressing vulnerabilities in software supply chains

Thijs Feryn Thijs Feryn · World Congress 2026 North America

1:39 min

Introduction to Kubernetes security challenges and opportunities

Marc Nimmerrichter · World Congress 2022

3:36 min

Understanding software supply chain threats and security risks

Andrei Epure Andrei Epure · World Congress 2024

3:39 min

Exploring the mechanics of software supply chain attacks

Chris Heilmann Chris Heilmann +2 · LIVE

1:03 min

Highlighting supply chain vulnerabilities from obfuscated package manager backdoors

Daniel Cranney Daniel Cranney +1 · LIVE

4:40 min

Assessing common Kubernetes security incidents and misconfigurations

Rico Komenda Rico Komenda · World Congress 2025

More from World Congress 2026 Europe

Building the Nervous System of AI - Michael Kagan (NVIDIA) thumbnail
29:17

Building the Nervous System of AI - Michael Kagan (NVIDIA)

Michael Kagan +1

Five Things in Tech that Matter Now - WeAreDevelopers World Congress 2026 Closing Keynote thumbnail
19:41

Five Things in Tech that Matter Now - WeAreDevelopers World Congress 2026 Closing Keynote

Christian Heilmann · WeAreDevelopers

The Sound of Your Secrets: Teaching Your Model to Spy, So You Can Learn to Defend thumbnail
32:06

The Sound of Your Secrets: Teaching Your Model to Spy, So You Can Learn to Defend

David vonThenen · NetApp

Super scaling for the Super Bowl: How to survive 30 million users hitting your backend in 30 minutes thumbnail
35:13

Super scaling for the Super Bowl: How to survive 30 million users hitting your backend in 30 minutes

Irina Branovic · adjoe

Running Secure Life Science Research at Scale using Hybrid GPU HPC and Kubernetes 🧬 thumbnail
24:23

Running Secure Life Science Research at Scale using Hybrid GPU HPC and Kubernetes 🧬

Jeremy Murray · Stack8s

Angstfreude - AI and Corporate Culture - The Thrill and the Threat thumbnail
30:26

Angstfreude - AI and Corporate Culture - The Thrill and the Threat

Axel Ebert +1

Upcoming sessions on this topic

Open session

Supply Chain Security for the Everyday Engineer

  • Pradumna Saraf

    Kestra Technologies

    Quality Assurance Engineer

Open session

Your Agent Just Ran rm -rf: Sandboxing AI Agents from Docker to GKE Agent Sandbox

  • Rajani Ekunde

    Identity company

    Senior Software Engineer

Open session

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

  • Vikram Vaswani

    Consultant

Open session

Moving from Panic to Process: Testing Your Way to a Successful K8s Migration

  • Keerthivaasan Kanagaraj

    Freshworks

    Lead Site Reliability

  • Dharani R A

    Freshworks

    Lead Site Reliability Engineer

Open session

Architecting Secure and Encrypted Microservices in K8s

  • Arushi Garg

    Adobe

    SDE-2

  • MV Shiva

    Google

    SWE

Open session

Your AI Agents Are Bleeding Tokens: Building a Runtime Cost Control Plane for LLMs

  • Aakriti Aggarwal

    IBM Research

    Research Engineer

  • Bhavishya Pandit

    66degrees

    Leading AI Innovation

Related videos

Hacking Kubernetes: Live Demo Marathon thumbnail
46:36

Hacking Kubernetes: Live Demo Marathon

Andrew Martin

World Congress · 2022

Your registry can't stop a valid login. What happens then? thumbnail
21:37

Your registry can't stop a valid login. What happens then?

Khushboo Verma · Cloudflare

World Congress North America · 2026

Supply Chain Security and the Real World: Lessons From Incidents thumbnail
24:47

Supply Chain Security and the Real World: Lessons From Incidents

Adrian Mouat · Chainguard

World Congress · 2025

Kubernetes Security Best Practices thumbnail
23:08

Kubernetes Security Best Practices

Rico Komenda · adesso

World Congress · 2025

Kubernetes Security - Challenge and Opportunity thumbnail
42:45

Kubernetes Security - Challenge and Opportunity

Marc Nimmerrichter

World Congress · 2022

Stop Running Mystery Meat in Production thumbnail
24:12

Stop Running Mystery Meat in Production

Jeroen van Erp · SUSE

World Congress North America · 2026

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.