The GitHub supply chain attack explained
This is how a single poisoned package can reach hundreds of organizations, and why GitHub is just the latest victim.
This video is for educational and awareness purposes only.
Chapters:
0:00 Prologue
0:14 What is a supply chain attack?
1:00 Why open source is so vulnerable
2:15 The worm that keeps spreading
4:42 The GitHub breach in context
5:39 What this means for you
6:17 How to defend against this
7:49 Outro