DEV Community

Paul McCarty
Paul McCarty

Posted on

All your repos are belong to us! A talk I gave recently at a security conf.

I gave a talk at CrikeyCon back in March talking about the SolarWinds supply chain attack. If you aren't aware of the SolarWinds attack it is the biggest example of a software supply chain attack. The Russian secret service (SVR) deployed a malicious loader to several SolarWinds updates in 2020 which allowed the Russians access to all the SolarWinds customers that had installed those updates. The point of the talk was to show how we can learn from that event in the context of devsecops and our engineering practices. https://youtu.be/nvXSlSbxnC0

Top comments (0)