WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2026 Europe • Jul 10, 2026 • Session details

Surviving the Vulnpocalypse: Open Source and Supply Chain Security in a Post Mythos World

Adrian Mouat

With AI developing zero-day exploits instantly, can your engineering team keep up? Learn how to deploy defensive generative models to proactively secure your open-source supply chain.

Pause
Mute Enter Fullscreen
#1 about 6 min

Emergence of LLMs capable of autonomous exploit development

Unexpectedly strong AI models like Mythos can autonomously transform vulnerabilities into functional exploits.

#2 about 3 min

Evaluating the real threat against critical infrastructure

While AI apocalypse claims are hyperbolic, previous hacks demonstrate that cyber incidents can impact critical physical infrastructure.

#3 about 4 min

The collapsing patch window for newly disclosed vulnerabilities

The time between vulnerability disclosure and exploitation has virtually vanished due to AI processing speeds.

#4 about 3 min

Leveraging older LLMs defensively for vulnerability hunting

Engineering teams can proactively use current AI models to sweep internal codebases for hidden security flaws.

#5 about 4 min

Building a six-step harness for automated vulnerability discovery

An automated security harness requires threat modeling guardrails and sandbox verification to filter false positives.

#6 about 4 min

Practical mitigation strategies for modern software supply chains

Rebuilding immutable containers, migrating to memory-safe languages, and adopting zero-trust practices minimize the attack surface.

#7 about 2 min

Securing developer infrastructure and eliminating long-lived tokens

Removing static credentials from deployment pipelines prevents severe compromises regardless of codebase vulnerabilities.

#8 about 3 min

The disproportionate impact of AI vulnerabilities on open source

Part-time maintainers face burnout as automated vulnerability discovery generates overwhelming unverified reports.

#9 about 2 min

Coordinating security mitigations with the CISA clearinghouse

Industry coalitions share threat intelligence and develop automated fixes to protect partners against rapid AI exploitation.

#10 about 2 min

Project Akritas and ecosystem-wide security patch coordination

The Linux Foundation provides a maintainer of last resort to fork and secure abandoned open source projects.

#11 about 2 min

Relying on robust test suites for automated AI patching

Automated remediation agents require comprehensive test coverage and human oversight to prevent deployment regressions.

Matching moments

2:36 min

Addressing vulnerabilities in software supply chains

Thijs Feryn Thijs Feryn · World Congress 2026 North America

2:32 min

Managing the accelerated pace of AI vulnerability discovery

Gerhard Eschelbeck Gerhard Eschelbeck +1 · World Congress 2026 North America

1:49 min

Adapting application security for AI-generated code

Christian Heilmann Christian Heilmann +1 · World Congress 2026 North America

1:20 min

Utilizing industry threat models for AI security

Balázs Kiss · World Congress 2023

2:45 min

Sourcing vulnerabilities and encouraging open source collaboration

Anna Oliveira · Coffee With Developers

2:58 min

Managing vulnerabilities in auto-generated software development processes

Chris Wysopal Chris Wysopal +2 · World Congress 2024

More from World Congress 2026 Europe

Building the Nervous System of AI - Michael Kagan (NVIDIA) thumbnail
29:17
3 months ago

Building the Nervous System of AI - Michael Kagan (NVIDIA)

Michael Kagan, Sead Ahmetović

Five Things in Tech that Matter Now - WeAreDevelopers World Congress 2026 Closing Keynote thumbnail
19:41
3 months ago

Five Things in Tech that Matter Now - WeAreDevelopers World Congress 2026 Closing Keynote

Christian Heilmann

The Sound of Your Secrets: Teaching Your Model to Spy, So You Can Learn to Defend thumbnail
32:06
3 months ago

The Sound of Your Secrets: Teaching Your Model to Spy, So You Can Learn to Defend

David vonThenen

Super scaling for the Super Bowl: How to survive 30 million users hitting your backend in 30 minutes thumbnail
35:13
3 months ago

Super scaling for the Super Bowl: How to survive 30 million users hitting your backend in 30 minutes

Irina Branovic

Running Secure Life Science Research at Scale using Hybrid GPU HPC and Kubernetes 🧬 thumbnail
24:23
3 months ago

Running Secure Life Science Research at Scale using Hybrid GPU HPC and Kubernetes 🧬

Jeremy Murray

Angstfreude - AI and Corporate Culture - The Thrill and the Threat thumbnail
30:26
3 months ago

Angstfreude - AI and Corporate Culture - The Thrill and the Threat

Axel Ebert, Karin Krobath

Upcoming sessions on this topic

Open session

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

  • Vikram Vaswani

    Consultant

Open session

Supply Chain Security for the Everyday Engineer

  • Pradumna Saraf

    Kestra Technologies

    Quality Assurance Engineer

Open session

Autopsy of an Autonomous Incident: When the Agent Made It Worse

  • Navin Pai

    StackGen

    Director of Engineering

Open session

What I Got Wrong Shipping an MCP Server for Live Infrastructure

  • Pritesh Kiri

    Harness

    Developer Relations Engineer

Open session

Beyond File Dumps: Context Engineering for Coding Agents

  • Animesh Dutta

    Arm

    Senior Software Engineer

Open session

How is SWE & EM roles are changing in the age of AI

  • Amol Sharma

    Stripe

    Engineering Manager

Related videos

Walking into the era of Supply Chain Risks thumbnail
37:36
LIVE • over 4 years ago

Walking into the era of Supply Chain Risks

Vandana Verma

Fighting the Next Wave of Cybercrime thumbnail
30:27
World Congress 2026 Europe • 3 months ago

Fighting the Next Wave of Cybercrime

Michele Zuccala, Misha Bragin, Ross Kukulinski, Frank Schlesinger, Tomislav Tipurić

The AI Security Survival Guide: Practical Advice for Stressed-Out Developers thumbnail
30:36
World Congress 2024 • about 2 years ago

The AI Security Survival Guide: Practical Advice for Stressed-Out Developers

Mackenzie

Can Machines Dream of Secure Code? Emerging AI Security Risks in LLM-driven Developer Tools thumbnail
35:37
LIVE • about 2 years ago

Can Machines Dream of Secure Code? Emerging AI Security Risks in LLM-driven Developer Tools

Liran Tal

WeAreDevelopers LIVE - Chrome for Sale? Comet - the upcoming perplexity browser Stealing and leaking thumbnail
56:03
LIVE • over 1 year ago

WeAreDevelopers LIVE - Chrome for Sale? Comet - the upcoming perplexity browser Stealing and leaking

Chris Heilmann, Daniel Cranney, Ramona Schwering

The transformative impact of GenAI for software development and its implications for cybersecurity thumbnail
25:19
World Congress 2024 • about 2 years ago

The transformative impact of GenAI for software development and its implications for cybersecurity

Chris Wysopal

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.