SIGNAL//SYNTH
Software Engineering

AI-Powered Threats to the Software Supply Chain

aired Aug 04, 2026 · 57.0m
Signal
80.2/ 100
High signal
confidence 0.99
Orig45.5
Actn100.0
Dens100.0
Dpth100.0
Clty50.3
Summary

Open-source software underpins virtually every modern application.

Why listen

It goes beyond the title with direct discussion of like, think, right, including: That ubiquity is a superpower for developers, but it is also an expanding attack surface.

Key takeaways
  1. 01The company started with hardened container images and has expanded to cover domains including VMs, language libraries, GitHub Actions, and agent skills
  2. 02In this episode, Matt joins Gregor Vann to discuss lessons from recent supply chain attacks, why CICD pipelines are now a primary attack surface, the challenge of meaningful softwa
  3. 03Basically, every language runtime or compiler or whatever is open source
Best for
listeners looking for a practical AI episode debrief