Tabletop Exercise: Is China and Russia in Your Software? How Do You Know?



Do you know what is inside your software?
 
As software supply chains become increasingly intricate, the threat of foreign adversaries infiltrating critical systems through compromised code has escalated dramatically. With open-source components forming the backbone of modern applications, often with dependency chains 60 levels deep, cybersecurity leaders face a daunting challenge: 6.8% of open-source software is of dubious origin, and over 20% is committed by anonymous developers.
 
Join us for this hands-on tabletop exercise that draws on intelligence and threat patterns uncovered by a global community of security experts, distilling hard-to-find signals into actionable insights, tracing contributions from potentially hostile nations and detecting recent software supply chain attacks that evade traditional security tools.
 
Participants will gain:
  • Actionable strategies to strengthen software provenance
  • Enhanced visibility
  • Resilience against increasingly stealthy and sophisticated threats

Speaker and Presenter Information

Trey Ford, CSTO, Bugcrowd

Relevant Government Agencies

Other Federal Agencies, Federal Government


Register as Attendee


Add to Calendar


This event has no exhibitor/sponsor opportunities


When
Fri, Jan 30, 2026, 9:00am - 12:00pm ET


Cost
Complimentary:    $ 0.00


Where
Carahsoft Conference & Collaboration Center
11493 Sunset Hills Rd
Reston, VA 20190
Get directions


Website
Click here to visit event website


Event Sponsors


Organizer
Bugcrowd Government Team at Carahsoft


Contact Event Organizer



Return to search results