Breaking the Chain: An Attacker's Perspective on Supply Chain Vulnerabilities and Flaws

Our talk divides the cloud development flow into 5 phases: IDE, SCM, package managers, CI/CD and Artifacts. We will demonstrate how supply chain attacks can affect organizations at each phase. This includes the risks of cloud, platforms, and application development, as well as the attacker's perspective on how to exploit these areas...

By: Ilay Goldman , Yakir Kadkoda

Full Abstract and Presentation Materials:
https://www.blackhat.com/asia-23/briefings/schedule/#breaking-the-chain-an-attackers-perspective-on-supply-chain-vulnerabilities-and-flaws-30063

application application development artifacts attacker attacks breaking cloud development flaws flow ide managers organizations package package managers perspective platforms risks scm supply supply chain supply chain attacks vulnerabilities