Software Supply Chain Security AMA: What Are We Still Getting Wrong?
Anant Shrivastava | Founder, Cyfinoid Research
Stephanie Domas | VP Security, Mozilla
Christopher Robinson | Chief Security Architect, OpenSSF
Date: Thursday, August 6 | 11:15am-11:45am ( The Convergence, Business Hall )
Pass Type: Briefings, Business Hall, Summits, Trainings
Track: The Convergence
Software supply chain security has moved from a niche engineering concern to a board-level, regulatory, and operational priority. SBOMs, dependency risk, CI/CD compromise, build integrity, provenance, vendor trust, open source sustainability, and AI-assisted development have all become part of the same conversation.
This Community Conversation is an audience-driven Ask Me Anything on the practical realities of securing modern software supply chains. Rather than a formal panel or prepared talk, the session will be shaped by the questions, concerns, and field experiences of participants.
The discussion will be facilitated by Anant Shrivastava, Founder of Cyfinoid Research and Black Hat Review Board Member, with a focus on pragmatic security tradeoffs, what is working, what remains unresolved, and where practitioners should pay attention next.
Bring your questions, war stories, implementation scars, and unpopular opinions. This is an open conversation for defenders, builders, security leaders, researchers, and anyone dealing with the messy reality of software supply chain security.
