Exploits Now Beat Patches: Open Source Security in the AI Era - Patrick Smyth, Chainguard

Why watch

Patrick Smyth of Chainguard presents on the evolving cybersecurity landscape where AI has made attackers more dangerous and exploits now land before patches are released. He covers the surge in supply chain malware, why traditional 30-day CVE remediation windows are insufficient, four critical attack surfaces (malware, known CVEs, zero days, and side doors like CI/CD and developer tools), and practical defenses including SLSA/Sigstore signing, faster CVE fixes, and hardening AI agent skills. Essential viewing for security engineers, DevOps professionals, and platform teams.