Building Secure Software in the Age of AI: Protecting Your Projects from Supply Chain Attacks

AI is helping developers build software faster than ever, but it’s also introducing new security risks through vulnerable dependencies, insecure AI generated code and software supply chain attacks are on the rise. In this talk, we'll look at how these threats affect Python projects and open source, and discuss practical ways to build secure software from the begining. You'll leave with actionable strategies for securing dependencies, strengthening your development workflow, and reducing avoidable vulnerabilities before they reach production.