Cyfinoid Research - Attack and Defend Software Supply Chain - DCTLV2025

Name of Training: Attack and Defend Software Supply ChainTrainer(s): Anant ShrivastavaDates: August 11-12, 2025Time: 8:00 am to 5:00 pm PTVenue: Las Vegas Convention CenterCost: $1800 Course Description:  In today's interconnected world, software development relies heavily on third-party components---up to 80% of your code could come from external sources. This reliance creates a complex web of dependencies, making your software supply chain a prime target for cybercriminals. Securing it is no longer optional; it's essential. This hands-on course takes a comprehensive approach to attacking and securing the software supply chain. In the first section, you'll assume the role of a sophisticated attacker, infiltrating an enterprise through its supply chain partners. You'll learn how to compromise developer laptops, code repositories, CI/CD pipelines, internal registries, and even production environments. Once you've seen how vulnerabilities can be exploited, we'll pivot to defense. In the