Latest, Pwned: Securing the Software Supply Chain

​Recent weeks have brought a steady stream of critical vulnerabilities, including the PHP2Shell flaws, where exploitation attempts were observed ahead of patch release. They are a reminder that much of what runs in production was never written by the team that operates it: base images, open-source packages, CI/CD plugins and build pipelines.

​This session of the AWS Security User Group Singapore looks at software supply chain security on AWS. We cover how to identify and reduce exposure, how to establish trust in the components you deploy, and how to demonstrate that assurance to regulators, auditors and customers.

​Guests

• ​Cyber Security Agency of Singapore (CSA): supply chain security, ahead of the upcoming updated CCoP

• ​Matt McManus from Vanta - Point-in-Time Is a Point of Failure: Continuous Compliance for the Supply chain in the AI era

​Speakers and topics: To be announced.

​Who should attend: Security engineers, cloud and platform engineers, DevSecOps practitioners, architects, and compliance and risk professionals.

​Agenda

• ​6:30 PM: Doors open, pizza and networking (vegetarian and halal options available)

• ​7:05 PM: Talks begin

• ​Closing networking session

​Registration and entry

• ​Register on Luma. Approved guests receive a confirmation email.

• ​Present the confirmation at the Level 1 Concierge for access to Level 5.

• ​Walk-ins are subject to venue capacity. Confirmed registrations take priority, and entry without confirmation is not guaranteed.

​Photographs and recordings may be used for future promotion.