The Software Supply Chain Just Got Harder to See

Open-source supply chain attacks are back in the news, and the pattern is familiar: a trusted package, a compromised account, hundreds of malicious updates pushed downstream before anyone noticed.

What's changing is the exposure on multiple fronts. Open-source components are in nearly every application. AI components are being wired in alongside them, often with no inventory of what they are or where they came from. And code being written by AI is shipping faster than ever, raising a question few teams are asking: when AI writes the code, does anyone actually know what it pulled in? According to Checkmarx's upcoming 2026 Future of AppSec report, AI-generated code is already a top-4 breach contributor, cited by 1 in 4 organizations. You can't protect what you don't know is there.

Join Alan Shimel, CEO of TechStrong, Avi Hein, Product Marketing Lead at Checkmarx, and Emma Datny, Sr. Product Marketing Manager at Checkmarx, for a direct conversation on where software supply chain risk stands in 2026, why the visibility problem is getting harder, and what security leaders can do about it now.

Key Takeaways:

Understand how AI-generated code is reshaping software supply chain risk and why traditional visibility approaches are no longer sufficient.
Learn how to identify hidden open-source and AI dependencies before they become security liabilities.
Discover practical strategies for creating and maintaining a comprehensive inventory of software components across modern development environments.

Emma Datny

Sr. Program Manager - CheckmarX

Emma is a Senior Product Marketing Manager at Checkmarx, where she focuses on AI supply chain security, software supply chain security, and AppSec posture management. With a background in go-to-market for DevOps, trust & safety, and cybersecurity, she brings a sharp perspective on how the industry is evolving and what it means for the teams building and securing software today.

Avi Hein

Product Marketing Professional Lead

Avi Hein is a Product Marketing Professional Lead at Checkmarx, where he focuses on code security, including SAST, DAST, and API Security. With deep expertise in application security, developer tools, and software supply chain security, he brings a sharp perspective on how modern software risk is evolving and what it means for the teams building and securing applications today.

Alan Shimel

Founder & CEO - Techstrong Group

Alan is founder, CEO & editor-in-chief of Techstrong Group, the company behind DevOps.com, Container Journal, Security Boulevard and Digital Anarchist, as well as co-founder of the DevOps Institute. As such, he is attuned to the world of technology, particularly cloud, DevOps, security and open source. With almost 30 years of entrepreneurial experience, Alan has been instrumental in the success of several organizations. He is an often-cited personality in the security and technology community and is a sought-after speaker at industry and government conferences and events. In addition to his writing, his DevOps Chats podcast, DevOps TV and Digital Anarchist audio and videos are widely followed. Alan attributes his success to a combination of a strong business background and a deep knowledge of technology. His legal background, long experience in the field and New York street smarts combine to form a unique personality. He is a graduate of St. John's University with a Bachelor of Arts in Government and Politics, and holds a JD degree from NY Law School.

Sponsored By: