The Divine and Felonious Nature of Cyber Security
summary
Claims that software supply chains are enormous and risky: 1.5M Java module downloads per week, 5M Node modules, ~31 billion Maven downloads a year with roughly 8% known vulnerabilities, and ~$8M typical breach remediation. Shows recurring failure patterns — unpatched Struts leading to Equifax, versus Fannie Mae running a targeted command-injection probe and remediating parsing in two days. Recommends shift left controls (IDE plugins, CI scans, library scanning), supply chain hygiene, chaos/red‑team exercises and measuring adversary retention.
AI-written summary · about
chapters (6)
- 0:00Start
- 2:36The Felonious Nature of Cybersecurity
- 9:11Equifax
- 19:58Human Continuous Learning
- 29:18Worst Web Developers on the Planet
- 34:45Best Metric for Security
related talks
44mKeeping Your Software Supply Chain Healthy
41mSponsored Session: Software Supply Chain Threat Landscapes: A Moving Target
46mThe Supply Chain Conundrum: Why Traditional Application Security Is...
39mWe Are All Equifax: The Data Behind DevSecOps
46mThe Anatomy of Java Vulnerabilities
30mDOES14 - Joshua Corman - Sonatype
25mYour Software Supply Chain is Only as Secure as its Weakest Link
41mManaging the Risk of Software Supply Chain Attacks