World Congress 2025 • Aug 20, 2025 • Session details

Supply Chain Security and the Real World: Lessons From Incidents

When hackers breached Codecov, they weaponized dependencies to pivot across organizations. Learn concrete strategies to harden your CI/CD pipelines against real-world supply chain attacks.

Supply Chain Security and the Real World: Lessons From Incidents thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

2:36 min

Addressing vulnerabilities in software supply chains

Thijs Feryn

Thijs Feryn · World Congress 2026 North America

3:36 min

Understanding software supply chain threats and security risks

Andrei Epure

Andrei Epure · World Congress 2024

3:09 min

Practical mitigation strategies for modern software supply chains

Adrian Mouat

Adrian Mouat · World Congress 2026 Europe

1:22 min

Discovering security vulnerabilities outside primary application code

Farshad Abasi

Farshad Abasi · World Congress 2026 North America

3:10 min

Implementing preventative cybersecurity to mitigate software supply chain risks

Coffee With Developers

2:46 min

Mapping the complete software supply chain attack surface

Matthew Brady

Matthew Brady · World Congress 2026 Europe

More from World Congress 2025

GenAI Security: Navigating the Unseen Iceberg thumbnail

GenAI Security: Navigating the Unseen Iceberg

Maish Saidel-Keesing · AWS

Behind the Code: How Women Are Powering the Future of AI thumbnail

Behind the Code: How Women Are Powering the Future of AI

Alexandra Wudel +2

The AI Hype Filter: What’s Real, What’s Investable, What’s Noise? thumbnail

The AI Hype Filter: What’s Real, What’s Investable, What’s Noise?

Justus Lumpe +3

AI in Leadership: How Technology is Reshaping Executive Roles thumbnail

AI in Leadership: How Technology is Reshaping Executive Roles

Bernd Datler +3

The AI-Ready Stack: Rethinking the Engineering Org of the Future thumbnail

The AI-Ready Stack: Rethinking the Engineering Org of the Future

Alex Laubscher +3

AI Sovereignty: What Does It Take? thumbnail

AI Sovereignty: What Does It Take?

Boris Hecker +3

Upcoming sessions on this topic

Supply Chain Security for the Everyday Engineer

Pradumna Saraf

Kestra Technologies

Quality Assurance Engineer

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

Vikram Vaswani

Consultant

Ship Happens: Guardrails for AI-Written Code

Anthony Nguyen

LaunchDarkly

Senior Solutions Engineer

From Monolith to Phases: Restructuring Terraform Deployments That Work in Any Cloud

Naveen Kumar Kalapala

Infosys Ltd

Lead Cloud Engineer

Your Agent Just Ran rm -rf: Sandboxing AI Agents from Docker to GKE Agent Sandbox

Rajani Ekunde

Identity company

Senior Software Engineer

Cloud Sovereignty Is an Architecture Problem: Patterns for Modern Platform Teams

Josephine Eskaline Joyce

IBM India Pvt Ltd

STSM, Chief Architect
Norton Stanley

IBM

Storage Architect

Related videos

Walking into the era of Supply Chain Risks thumbnail

Walking into the era of Supply Chain Risks

Vandana Verma

LIVE · Apr 2022

Securing your application software supply-chain thumbnail

Securing your application software supply-chain

Niels Tanis · Veracode

World Congress · 2022

Open Source Secure Software Supply Chain in action thumbnail

Open Source Secure Software Supply Chain in action

Natale Vinto · Red Hat

World Congress · 2024

Your registry can't stop a valid login. What happens then? thumbnail

Your registry can't stop a valid login. What happens then?

Khushboo Verma · Cloudflare

World Congress North America · 2026

Beyond SBOMs: The Future of Container Supply Chain Security thumbnail

Beyond SBOMs: The Future of Container Supply Chain Security

Mohammad-Ali A'râbi · JobRad

World Congress Europe · 2026

Stranger Danger: Your Java Attack Surface Just Got Bigger thumbnail

Stranger Danger: Your Java Attack Surface Just Got Bigger

Vandana Verma Sehgal

LIVE · Jan 2022

Related articles

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

over 4 years ago

Walking Into The Era of Supply Chain Risks

DC

Daniel Cranney

Do You Trust Your Agents? Five Quick Ways to Contain Them

Do you trust your agents? Most of us use coding agents every day now. Give one a vague request, walk away, and come back to a pile of mostly working software. It’s brilliant, right up until you rem...

18 days ago

An image of a cube-shaped container with a ball of light inside of it

DC

Daniel Cranney

Understanding and Mitigating Common Web Vulnerabilities

Vulnerabilities exist in many forms on the web, and attackers continue to find creative ways to exploit them. Technological advances like the proliferation of AI are of course exciting nd filled wi...

over 1 year ago

An image with neon lighting featuring a globe and a padlock

DC

Daniel Cranney

The Overflow: Security and Privacy

Every week we dig through hundreds of links from all over the web, and it’s often hard for developers keep up. So, we thought we’d put together some links we couldn’t fit in the Dev Digest in what ...

8 months ago

From learning to earning

Jobs that call for the skills explored in this talk.

Product Security Incident Response Analyst

Expert $329k Remote Github Code Review Data Analysis

Staff Developer Advocate, GitHub Security Lab

San Francisco, CA, United States

Experienced $323k Git Github Databases

Staff Security Data Engineer

Experienced Remote Github Airflow Terraform

Senior Incident Response Analyst

Expert $124k Remote Github Code Review Data Analysis

Senior Software Engineer, Vulnerability Management

Expert $329k Remote Ruby Golang Docker

Cyber Defense & Incident Response

Delivery Hero SE

Remote Golang Cybercrime Security Log