Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

In 2020, the SolarWinds attack exposed the vulnerability of supply chains worldwide, a problem this episode’s guest, Matt Moore, had already been working to solve for years. In 2021, he co-founded Chainguard to protect supply chains from future breaches. His conversation with 1Password CTO Nancy Wang and Google Gemini’s Dev Tagare covers why the open source trust model is structurally broken and how AI agents have complicated supply chain security, with a live demo demonstrating how standard tools overlook many vulnerabilities.

A quick look at Managed Units within One Identity Active Roles. Music supplied by Camtasia Assets.

In today’s AI-first world, anyone can build an app. The hard part is shipping it securely where your teams already work. Datadog Apps lets you build and deploy apps natively in Datadog, with your existing data, integrations, permissions, governance, and observability built in. The next chapter of app development starts now.

AI is changing the speed and scale of cyber risk, but the fundamentals of security remain the same. Elisa Costante, VP of Software Engineering at Forescout, discusses why visibility, risk assessment, and adaptive controls are essential for protecting organizations against rapidly evolving threats. Learn more.

Available as a fully integrated add-on for Sophos MDR and Sophos XDR, Sophos ITDR provides a comprehensive security solution that addresses the growing and complex challenges of identity threats and is delivered through the Sophos Fusion platform.

You guide the strategy. You recommend the controls. You field the call when something goes wrong. You were always their CISO - now deliver it at scale with Sophos CISO Advantage.

Ask an organization about its most critical assets and you'll hear the usual answers: health records, PHI, sensitive data. Then one person said fertilizer. The room laughed until he explained. With large grounds to maintain, the organization kept big stores of it on site, and in the wrong hands, that becomes a serious physical threat. Insider risk isn't only about files. It's about anything that could cause harm if someone misused it.

What's new this month in Vanta? Our quarterly Vanta Delivers releases, all about building anything, anywhere.