AI-Powered Threats to the Software Supply Chain
Podcast Archives - Software Engineering Daily

AI-Powered Threats to the Software Supply Chain

B2Upper-intermediateAugust 4, 202657 min

Open source software underpins virtually every modern application. That ubiquity is a superpower for developers, but it is also an expanding attack surface. Software supply chain attacks were once rare but are now happening daily, with malicious actors exploiting the trust developers place in public registries, package managers, and CI/CD pipelines. Chainguard is a secure software supply chain platform. The company started with hardened container images and has expanded to cover domains including VMs, language libraries, GitHub Actions, and agent skills. Matt Moore is a co-founder and CTO of Chainguard, and a veteran of...

Play episode

Opens the player: the full transcript, every word clickable, with translation and flashcards.

Try it: tap any word

Real sentences from the start of this episode. Every word is marked with its level.

Sentence 1 of 12 · 0:00

.

That ubiquity is a superpower for developers, but it is also an expanding attack surface.

Hear this sentence

Tap a word to see its meaning in your language.

Do you know these words?

8 harder words from this episode. Tap one to see what it means, then mark it.

  • C15:34
  • B29:52
  • B216:19
  • C122:36
  • B229:13
  • C139:23
  • B242:57
  • C150:37

Mark a few words and we'll tell you how this episode fits your level.

Is this episode right for you?

B2

B2 · Upper-intermediate

Comfortable if you already follow TV news

A1 26%A2 33%B1 21%B2 16%C1 3%
  • 81% of the words are B1 or easier.
  • 185 words a minute: natural, fairly fast speech.
  • 257 harder words (B2 and up) in the whole episode.

Transcript

The opening of the episode. The whole transcript is in the player.

0:00

Open-source software underpins virtually every modern application. That ubiquity is a superpower for developers, but it is also an expanding attack surface. Software supply chain attacks were once rare, but are now happening daily, with malicious actors exploiting the trust developers' place in public registries,

0:20

package managers, and CICD pipelines. ChainGuard is a secure software supply chain platform. The company started with hardened container images and has expanded to cover domains including VMs, language libraries, GitHub Actions, and agent skills. Matt Moore is a co-founder and CTO of ChainGuard, and a veteran of Google's open-source, container, and security infrastructure work.

0:46

In this episode, Matt joins Gregor Vann to discuss lessons from recent supply chain attacks, why CICD pipelines are now a primary attack surface, the challenge of meaningful software inventories, the EU Cyber Resilience Act,

That was the opening. The rest of the episode (56 min) is in the player: every word clickable, with translation, saved words and flashcards.

Continue in the player

Automatically generated from the audio. May contain errors. Audio belongs to its publisher and is played from their feed. Rights holders can request removal — copyright & takedown policy