AI-Powered Threats to the Software Supply Chain
Podcast Archives - Software Engineering Daily

AI-Powered Threats to the Software Supply Chain

B2中高级2026年8月4日57分钟

Open source software underpins virtually every modern application. That ubiquity is a superpower for developers, but it is also an expanding attack surface. Software supply chain attacks were once rare but are now happening daily, with malicious actors exploiting the trust developers place in public registries, package managers, and CI/CD pipelines. Chainguard is a secure software supply chain platform. The company started with hardened container images and has expanded to cover domains including VMs, language libraries, GitHub Actions, and agent skills. Matt Moore is a co-founder and CTO of Chainguard, and a veteran of...

播放本集

打开播放器:完整文字稿,每个单词都可点击,附翻译和单词卡。

试一试:点任意单词

来自本集开头的真实句子,每个单词都标出了难度级别。

第 1 句,共 12 句 · 0:00

.

That ubiquity is a superpower for developers, but it is also an expanding attack surface.

点一个单词,用你的语言查看释义。

这些单词你认识吗?

本集中 8 个较难的单词。点一个查看释义,然后标记一下。

标记几个单词,我们会告诉你这一集是否适合你的水平。

这一集适合你吗?

B2

B2 · 中高级

能看懂电视新闻就会觉得轻松

A1 26%A2 33%B1 21%B2 16%C1 3%
  • 81% 的单词在 B1 或更简单的水平。
  • 每分钟 185 词:自然语速,偏快。
  • 整集共有 257 个较难的单词(B2 及以上)。

文字稿

本集开头部分。完整文字稿在播放器中。

0:00

Open-source software underpins virtually every modern application. That ubiquity is a superpower for developers, but it is also an expanding attack surface. Software supply chain attacks were once rare, but are now happening daily, with malicious actors exploiting the trust developers' place in public registries,

0:20

package managers, and CICD pipelines. ChainGuard is a secure software supply chain platform. The company started with hardened container images and has expanded to cover domains including VMs, language libraries, GitHub Actions, and agent skills. Matt Moore is a co-founder and CTO of ChainGuard, and a veteran of Google's open-source, container, and security infrastructure work.

0:46

In this episode, Matt joins Gregor Vann to discuss lessons from recent supply chain attacks, why CICD pipelines are now a primary attack surface, the challenge of meaningful software inventories, the EU Cyber Resilience Act,

以上是开头部分。 本集其余部分(56 分钟)在播放器中:每个单词都可点击,附翻译、生词收藏和单词卡。

在播放器中继续

由音频自动生成,可能存在错误。 音频版权归其发布者所有,并从其订阅源播放。版权所有者可申请删除 — 版权与删除政策