Apr 16
Loading video player...
March 2026 made supply chain attacks feel a lot less theoretical, but what made these incidents different? The hosts discuss compromised publishing credentials, automatic execution hooks like post-install scripts and Python `.pth` files, and how both humans and security tools caught the malicious releases. They also talk through concrete ways to make developer environments harder to abuse. We are always happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners. DevSecOps Talks podcast LinkedIn page (https://www.linkedin.com/company/devsecops-talks/) DevSecOps Talks podcast website (https://devsecops.fm/) DevSecOps Talks podcast YouTube channel (https://youtube.com/channel/UCRjpE9xKxZeBkRgYiLErEjw) Audio version and show notes: https://devsecops.fm/episodes/097-shift-left-get-hacked-supply-chain-attacks-hit-devs/ Subscribe to the podcast for the audio version and show notes at https://devsecops.fm/ Want to talk? Reach out on LinkedIn: https://www.linkedin.com/company/devsecops-talks #DevSecOps #InfraAsCode #CloudSecurity #DevOps #Podcast #CyberSecurity #Security #SSDLC #Devsecopstalks