The New Normal: Collaborative Strategies in a Regulated, Secure, and AI World
summary
Claims that software crime costs about $9 trillion and that only 11% of open source has a maintainer, with a startling 35% of recent Log4j Maven downloads still vulnerable. Points out poisoned or provenance-less AI models on Hugging Face and malware in Python packages, and legal risks including fines or prison. Offers a proven DevOps fix: build contract dashboards (used with simple tools like Dashing, Maven Central scans and vulnerability scanners) that align dev and ops, drive automation, improve patching speed and actually reduce disputes.
AI-written summary · about
chapters (10)
- 0:00Introduction and speaker background
- 1:46Rising cybercrime and its impact
- 4:38Open source supply chain risks
- 9:14AI threats and vulnerabilities
- 15:34Legislation and regulatory pressures
- 21:19Zero-day exploits and fast patching
- 23:01Collaboration challenges in software teams
- 26:34Bridging gaps with shared dashboards
- 38:16Solutions for security and productivity
- 40:06Q&A session
related talks
41mThe Divine and Felonious Nature of Cyber Security
56mA New Hope for 2023? What Developers Must Learn Next
28mScalable Security and Compliance in the Age of AI
25mYour Software Supply Chain is Only as Secure as its Weakest Link
42mMagic of Automation and Everyday Chores
57mJava Reimagined: AI, Cybersecurity, and the Modern Software Supply Chain
01h 05mPractical steps for creating safer software (Code included)
40mMagic of Automation and Everyday Chores