Topic

Supply Chain Security talks at BSides

250 talks tagged Supply Chain Security from 70 chapters of BSides events worldwide. Software supply chain security, package management, and dependency security

Demystifying Bug Bounties: Insights from a Decade of Experience

Yassine Aboukir

BSides Prishtina · 2023

Technical Supply Chain Security Vulnerability Research Red Talk

Open →2023-05

Climbing the Production Mountain: Practical CI/CD Attacks Using CI/CD Goat

Omer Gil Asaf Greenholts

BSides Las Vegas · 2022

Technical DevSecOps Supply Chain Security Red Demo

Open →2022-09

Securing Bare Metal Hardware at Scale

Matt King Paul McMillan

BSides PDX · 2018

Technical Supply Chain Security Advanced Talk

Open →2019-02

Pwning Cloud Contexts: From GitHub Token to Compromising an Entire GCP Organization

BSides Ahmedabad · 2024

Technical Cloud IAM Supply Chain Security Vulnerability Research Red Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2024-04

Fighting Secrets In Source Code With TruffleHog

BSidesSF · 2018

Technical Tooling DevSecOps Supply Chain Security Vulnerability Research Talk

Open →2018-04

Pwning Android Apps at Scale

Sparsh Shashank

BSides Ahmedabad

Research Technical Mobile Security Supply Chain Security Vulnerability Research Advanced Red Case Studies and Incidents Analysis+2

Open →2023-02

Metlstorm's Empiricism Emporium: Unpleasant Truths Our Speciality

BSides Wellington · 2017

Technical War Stories Active Directory Kerberos Supply Chain Security Threat Intel Advanced Red+1

Open →2018-02

Linux Under Siege: Analyzing the Latest Cyber Espionage Tactics and Malware Trends

Marc Rivero Lopez

BSides Budabest · 2024

Technical Malware Analysis Supply Chain Security Threat Intel Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2025-01

Red Team Handcuffs

BSides Seattle · 2020

Technical Supply Chain Security Red Case Studies and Incidents Analysis Talk

Open →2020-11

Hacking a Hackathon for Fun and Profit

Alexei Kojenov Alex Ivkin

BSides PDX · 2018

Technical Supply Chain Security Vulnerability Research Web AppSec Red Case Studies and Incidents Analysis Talk

Open →2018-03

Tokens & Takeovers: Cloud-Powered Supply Chain Attacks

BSides Ahmedabad · 2025

Technical Supply Chain Security Talk

Open →2025-03

To Protect and Control: The Militarization of the Internet

BSides Cape Town · 2025

Policy Research Privacy Supply Chain Security Threat Intel Talk

Open →2025-12

BSidesSF 2025 - Scalably Securing Third-party Dependencies in... ( Ziyad Edher, Chris Norman)

Ziyad Edher Chris Norman

BSidesSF · 2025

Technical Supply Chain Security Talk

Open →2025-06

Container vuln management with (hopefully) minimal burnout

BSidesSF · 2023

Technical Supply Chain Security Talk

Open →2023-05

Attacking & Defending Supply Chains: How we got Admin in your Cloud, Again

BSidesSF · 2024

Technical Cloud IAM Supply Chain Security Talk

Open →2024-07

Maersk: The Ransomware Survivors

BSides Prishtina · 2017

Technical DFIR Malware Analysis Supply Chain Security Intermediary Case Studies and Incidents Analysis Talk

Open →2023-05

Well well well, if it isn't the consequences of my own actions

BSides Canberra · 2025

Technical Cryptography Supply Chain Security Vulnerability Research Advanced Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2025-12

Your Critical System IS (NOT?) Vulnerable: CSAF, VEX, SBOM and the Future of Advisories

Allan Friedman Jens Wiesner

BSides Las Vegas · 2021

Policy Technical Supply Chain Security Vulnerability Research Talk

Open →2021-08

Sharing is not caring: Proliferation of GitHub code in real attacks

Christopher Doman

BSides London · 2017

Technical Supply Chain Security Talk

Open →2017-06

When is a vulnerability not a vulnerability? Overcoming the inundation of noisy supply chain security alerts

BSidesSF · 2023

Technical Supply Chain Security Technical Deep-dives Talk

Open →2023-05

BSidesSF · 2023

Technical DevSecOps Supply Chain Security Intro Blue Talk

Open →2023-05

BSidesSF 2023 - Securing the Pipeline: Protecting Self-Hosted GitHub Runners (Adnan Khan)

BSidesSF · 2023

Technical DevSecOps Supply Chain Security Talk

Open →2023-05

BSidesSF 2022 - JavaScript Obfuscation - It’s All About the P-a-c-k-e-r-s (Or Katz)

BSidesSF · 2022

Technical Supply Chain Security Web AppSec Talk

Open →2022-07

Insane in the Supply Chain: Threat modeling for attacks on AI systems

Eoin Wickens Marta Janus

BSidesSF · 2024

Research Supply Chain Security Talk

Open →2024-07

Exposed Secrets — How Public Git Repositories and Docker Images Expose Millions of Secrets

Mackenzie Jackson

BSidesSF · 2022

Research DFIR Supply Chain Security Threat Intel Case Studies and Incidents Analysis Empirical Research Talk

Open →2022-07

A Case Study of MacOS Supply Chain Compromise

Jason Craig Michael George

BSidesSF · 2018

Technical Detection Engineering Malware Analysis Supply Chain Security Blue Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2018-04

Tales from the Breach

BSides Seattle · 2024

War Stories Cloud IAM Supply Chain Security Case Studies and Incidents Analysis Talk

Open →2024-05

Non-Human Identity Attack Surface: A Live Hacking Demo and Defense Strategies

BSides Toronto · 2024

Technical Cloud IAM Supply Chain Security Blue Red Demo

Open →2024-10

Doppelgänger Devices: Investigating Fake iPhones & Security Implications

BSides Joburg · 2024

Technical Supply Chain Security Demo Talk

Open →2024-08

Snow Nor Rain Nor Dependency Confusion: How to Deliver the Right Package

Jessica Smith Justin Engler

BSidesSF · 2024

Technical Supply Chain Security Intermediary Red Case Studies and Incidents Analysis Talk

Open →2024-07

Beyond The Code / SBOM: Supply Chain Security

Anant Shrivastava

Technical Supply Chain Security Talk

Open →2024-02

CI/CD Security: A New Eldorado

Remi Escourrou Xavier Gerondeau Gauthier Sebaux

BSides Las Vegas · 2022

Technical Cloud IAM DevSecOps Supply Chain Security Red Talk

Open →2022-09

BSidesSF 2019 - Vendor Security: Where Our Data Goes We Follow

Justin Calmus Rachel Black Vivienne Pustell Niru Ragupathy Kyle Tobener Wendy Zenone

BSidesSF · 2019

Technical Supply Chain Security Panel

Open →2019-03

Security Considerations for Services Using AI Models

BSidesSF · 2024

Technical AI Security Supply Chain Security Vulnerability Research Talk

Open →2024-07

Keep it Like a Secret: When Android Apps Contain Private Keys

BSidesSF · 2018

Research Cryptography Mobile Security Supply Chain Security Case Studies and Incidents Analysis Empirical Research Talk

Open →2018-04

Signing your code the easy way

BSides DC · 2019

Technical DevSecOps Supply Chain Security Talk

Open →2019-11

Vulnerabilities in Game Distribution via Steam: An Attack Vector for Malware Dissemination

BSides São Paulo · 2025

Technical Malware Analysis Supply Chain Security Vulnerability Research Red Talk

Open →2025-06

Emerging Best Practices in Software Supply Chain Security: What We Can Learn from Google, the White House, OWASP, and Gartner

BSidesSF · 2022

Technical Supply Chain Security Talk

Open →2022-07

Panda Mirror: How the Chinese CCP Manipulates NPM to Hoard Malware

BSides Canberra · 2025

Research Technical Malware Analysis Supply Chain Security Threat Intel Talk

Open →2025-12

Is Your Approach To Pipeline Security Flawed? Rethinking CI/CD Security

BSides London · 2025

Technical DevSecOps Supply Chain Security Intermediary Talk

Open →2025-02

Hunting Supply Chain Threats Using Anomaly Detection

Craig Chamberlain

BSidesSF · 2023

Technical Cloud IAM Detection Engineering Supply Chain Security Case Studies and Incidents Analysis Methodology Talk

Open →2023-05

Scaling the Security Researcher to Eliminate OSS Vulnerabilities

Jonathan Leitschuh

Bsides CT · 2023

Research Technical Supply Chain Security Tooling Vulnerability Research Case Studies and Incidents Analysis Technical Deep-dives Keynote

Open →2023-10

Enhancing Secret Detection in Cybersecurity with Small LMs

Danny Lazarev Erez Harush

BSidesSF · 2025

Technical AI Security Supply Chain Security Talk

Open →2025-10

BSides St. John's · 2025

Technical AI Security Detection Engineering Supply Chain Security Keynote

Open →2025-09

How We Got Into A Unicorn's Private Codebase

Ashikka Gupta Arshit Jain

Research Technical Mobile Security Supply Chain Security Vulnerability Research Red Case Studies and Incidents Analysis Empirical Research+1

Open →2022-05

Laser Beams & Light Streams: Building Affordable Light-Based Hardware Security Tooling

Larry Trowell Sam Beaumont

BSides Las Vegas · 2025

Technical Hardware Hacking Reverse Engineering Supply Chain Security Advanced Red Technical Deep-dives Talk

Open →2025-12

Down the Dependency Rabbit Hole

BSides PDX · 2019

Technical Supply Chain Security Talk

Open →2019-11

Who Makes the Rules?

BSides Knoxville

Research Technical AI Security Supply Chain Security Vulnerability Research Empirical Research Technical Deep-dives Talk

Open →2024-07

in ur scm, bein a ninja

BSides DC · 2014

Technical Supply Chain Security Talk

Open →2014-10

How Software Transparency Can Help Save the World

BSidesSF · 2020

Technical Supply Chain Security Talk

Open →2020-03

Jarrod Overson - How did 8 million developers download an exploit with no one noticing?

BSides PDX · 2018

Technical Supply Chain Security Case Studies and Incidents Analysis Talk

Open →2019-11

Doctor Docker: Building Your Infrastructure's Immune System

Mike McCabe Patrick Cooley

BSides DC · 2014

Technical Container Security DevSecOps Supply Chain Security Demo Talk

Open →2014-10

XZ made EZ by Joey DeVilla

Technical Supply Chain Security Intro Talk

Open →2024-05

Scaling the Security Researcher to Eliminate OSS Vulnerabilities Once and For All

Jonathan Leitschuh Patrick Way

BSides Las Vegas · 2022

Research Technical Supply Chain Security Vulnerability Research Case Studies and Incidents Analysis Methodology Talk

Open →2022-09

You Might Still Need Patches for Denim

Maya Kaczorowski Dan Lorenc

BSidesSF · 2019

Technical DevSecOps Supply Chain Security Talk

Open →2019-03

Omri Misgav - Whitelist Me, Maybe? When Cyber Criminals Try A Daring Approach to Evade Detection

BSides TLV · 2021

Technical Supply Chain Security Case Studies and Incidents Analysis Talk

Open →2021-08

BSidesSF 2018 - Supply Chain Attack Through CCleaner (Itai Tevet)

BSidesSF · 2018

Research Supply Chain Security Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2018-04

Are your GitHub Actions secure?

BSides Lisbon · 2022

Technical DevSecOps Supply Chain Security Red Talk

Open →2023-01

AI Package Hallucination

BSides Berlin · 2023

Research Technical AI Security Supply Chain Security Vulnerability Research Red Empirical Research Technical Deep-dives+1

Open →2024-01

Action Anomalies: A Hacker's Guide to Github Actions

BSides Tallinn · 2024

Technical DevSecOps Supply Chain Security Vulnerability Research Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2024-10

A Practical Supply Chain Hack: Blinking RGBs for Fun & Profit

BSides Cape Town · 2023

Technical Hardware Hacking Reverse Engineering Supply Chain Security Red Talk

Open →2023-12

Code C.A.I.N – Keeping Your Source Code Under Control

BSides TLV · 2022

Technical Detection Engineering OSINT Supply Chain Security Talk

Open →2022-07

Repo Jacking: How GitHub Exposes Over 70,000 Projects to Remote Code Injection

BSides Las Vegas · 2021

Research Technical Supply Chain Security Vulnerability Research Case Studies and Incidents Analysis Empirical Research Talk

Open →2021-08

CL0P's MOVEit Campaign: Threat Intelligence Analysis

BSides Basingstoke · 2023

Technical Malware Analysis Supply Chain Security Threat Intel Case Studies and Incidents Analysis Talk

Open →2023-09

Incident Response in Cases of Supply Chain Incidents

BSides Lisbon · 2023

Technical Supply Chain Security Blue Case Studies and Incidents Analysis Talk

Open →2024-02

Securing Fast and Furious DevOps Pipelines

Abdessamad Temmar

BSides Las Vegas · 2019

Technical DevSecOps Supply Chain Security Blue Talk

Open →2019-10

Fighting the Impossible: Supply Chain Attacks

Research Technical Malware Analysis Supply Chain Security Vulnerability Research Talk

Open →2025-03

BSidesRDU 2022 - SBOM + VEX + CSAF = The Future of Vulnerability Management - Panel

Omar Santos Diane Morris Josh Dembling Lisa Bradley Art Manion

BSides RDU · 2022

Technical Supply Chain Security Panel

Open →2023-03

Developers, Developers, Developers: Your Software Supply Chain is Compromised!

Johannes Ulrich

BSides Augusta 2025

Technical Malware Analysis Supply Chain Security Intermediary Blue Case Studies and Incidents Analysis Keynote

Open →2025-10

Slaying the Dragons: A Security Professional's Guide to Malicious Packages

Kirill Boychenko

BSidesSF · 2025

Technical Malware Analysis Supply Chain Security Threat Intel Blue Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2025-10

Playing Peekaboo With Runtime In CI/CD Pipelines

BSides London · 2025

Technical DevSecOps Supply Chain Security Intermediary Talk

Open →2026-03

Why I am (still) finding secrets in your code

BSides Canberra · 2025

Research Technical DevSecOps Supply Chain Security Vulnerability Research Blue Case Studies and Incidents Analysis Empirical Research+1

Open →2025-12

Beginner's Guide To Malicious Browser Extensions

BSides London · 2025

Technical Malware Analysis Supply Chain Security Intro Talk

Open →2026-03

Pipeline Pandemonium: How to Hijack the Cloud and Make it Rain Insecurity

BSides Las Vegas · 2024

Technical Cloud IAM DevSecOps Supply Chain Security Red Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2024-09

101 Things Your Application Is Doing Without Your Knowledge

BSides Las Vegas · 2024

Technical Malware Analysis Supply Chain Security Vulnerability Research Talk

Open →2024-09

BSidesBUD2022: Github Actions Security Landscape

Alex Ilgayev Ilia Shkolyar

BSides Budabest · 2022

Technical DevSecOps Supply Chain Security Empirical Research Technical Deep-dives Talk

Open →2023-06

Why mirroring software vulnerability data matters

BSides PDX · 2024

Technical Supply Chain Security Talk

Open →2024-11

My CI/CD Pipeline Contains All Security Tools Available! Now What...?

Technical DevSecOps Supply Chain Security Threat Modeling Talk

Open →2023-10

Securing the open-source supply chain

Morten Linderud

BSides Oslo · 2021

Technical Cryptography Supply Chain Security Intermediary Talk

Open →2022-02

CG - Towards Effective & Scalable Vulnerability Management

BSides Las Vegas · 2023

Technical Supply Chain Security Vulnerability Research Talk

Open →2023-10

Broken links — Behind the scenes of Supply Chain breaches

François Proulx

BSides NYC · 2023

Technical Supply Chain Security Case Studies and Incidents Analysis Methodology Talk

Open →2023-06

GT - Incubated Machine Learning Exploits: Backdooring ML Pipelines Using Input-Handling Bugs

Suha Sabi Hussain

BSides Las Vegas · 2024

Research Technical AI Security Supply Chain Security Vulnerability Research Methodology Technical Deep-dives Talk

Open →2024-09

DevSecOps for Security Teams

BSides Pakistan · 2021

Technical DevSecOps Supply Chain Security Talk

Open →2021-10

Breaking DNA: Cooking Malware in the Lab

Research Technical Supply Chain Security Vulnerability Research Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2026-03

Backdooring LLMs and Bypassing HuggingFace Malware Scanners

BSides Lisbon · 2025

Technical AI Security Supply Chain Security Vulnerability Research Red Technical Deep-dives Talk

Open →2026-01

PrashantPrashant

BSides Calgary · 2022

Technical Supply Chain Security Intermediary Case Studies and Incidents Analysis Talk

Open →2022-12

BSides Perth 2023: Sajeeb Lohani & Ben Christian: Achieving Supply Chain Security on a Budget

Sajeeb Lohani Ben Christian

BSides Perth · 2023

Technical Supply Chain Security Purple Talk

Open →2023-08

Tracking North Korean Threat Actor Infrastructure

BSides London · 2025

Technical OSINT Supply Chain Security Threat Intel Talk

Open →2026-03

Open Source Supply Chain — A Critical View from Red & Blue

BSides Leeds · 2019

Technical Supply Chain Security Purple Red Panel

Open →2019-01

Turnkey Code – Enhancing Secrets Management in Large Scale Organizations

BSides Lisbon · 2024

Technical DevSecOps Supply Chain Security Blue Talk

Open →2024-12

Hungry, Hungry Hackers

Sick Codes Casey John Ellis

BSides Las Vegas · 2024

Policy Technical Supply Chain Security Vulnerability Research Talk

Open →2024-09

Adventures in Vendor Security and Continuous Review

Lokesh Pidawekar

BSidesSF · 2020

Technical Supply Chain Security Threat Intel Talk

Open →2020-03

Abuse of Trust: Exploiting Our Relationship with Public Repositories

BSides Canberra · 2019

Technical Supply Chain Security Red Case Studies and Incidents Analysis Talk

Open →2019-05

Dependable Red Teaming by Using Confusion

BSides Cape Town · 2025

Technical DevSecOps Supply Chain Security Red Technical Deep-dives Demo Talk

Open →2025-03

BSidesSF 2023 - How do you trust your open source software? (Naveen Srinivasan, Brian Russell)

Naveen Srinivasan Brian Russell

BSidesSF · 2023

Technical Supply Chain Security Talk

Open →2023-05

Container Security, Are You Doing It Wrong?

Jeff Weatherford

BSides Tampa · 2024

Technical Container Security DevSecOps Supply Chain Security Intermediary Talk

Open →2024-05

Vendors Weighed and Some Found Wanting: DIY Supply Chain Security

BSides Tallinn · 2023

Community Technical OSINT Supply Chain Security Vulnerability Research Talk

Open →2023-10

Beyond Whack-a-Mole: Scaling Vulnerability Management by Embracing Automation

BSides Las Vegas · 2024

Technical DevSecOps Supply Chain Security Vulnerability Research Blue Talk

Open →2024-09

SBOM Challenges and How to Fix Them

Hossein Siadati Trupti Shiralkar

BSides Las Vegas · 2022

Technical Supply Chain Security Vulnerability Research Talk

Open →2022-09

HSMs in Plain Envelopes: A Code Signing Story

BSidesSF · 2023

Technical Cryptography Supply Chain Security Talk

Open →2023-05

View all 250 talks tagged Supply Chain Security →