Jossef Harush Kadouri
where else to find them
what they talk about
all 4 in the filters
where they keep going back
no series more than once — all 5 in the filters
on a stage with
- Idan Wieneronce
- Karine Ben-Simhononce
- Nir Pelegonce
all 6 in the filters
who talks about the same things
nobody close enough yet
| title | conference | date |
|---|---|---|
| The Dark Side of AI: The Hidden Supply Chain Risks in Open... | AI_dev: Open Source GenAI & ML Summit Europe 2024 | 2024-06-19 |
Demonstrates concrete supply‑chain attacks: account takeovers of popular npm packages with millions of weekly downloads, typosquatting that installs… | ||
| Hidden Risks in Open-Source Code and AI Models | IntelliJ IDEA Conf 2024 | 2024-03-06 |
Shows that popular open-source packages and pretrained models get weaponized: a published package-lab demo creates a fake pip package that autoloads remote… | ||
| Software Supply Chain: Panel on Threat Intel, Trends, Mitigation Strategies | RSAC 2023 | 2023-04-24 |
Panelists claim attackers shift upstream for big ROI — SolarWinds hits ~18,000 orgs, 3CX affects many customers — and urge treating a malicious package as a… | ||
| The Risks of Blind Trust in Code from Strangers | RSA Conference 2023 | 2023-04-24 |
Team analyzes close to two million unique open source packages per month with an automated pipeline of over 30 engines plus a package sandbox and human review… | ||
| Sponsored Session: The Simple, Yet Lethal, Anatomy of a Software Supply Chain Attack | SupplyChainSecurityCon at Open Source Summit North America 2022 | 2022-06-21 |
Demonstrates concrete attacks: a malicious pip/npm package exfiltrates SSH keys and environment variables after a simple install, and GitHub Actions pipelines… | ||
| nothing matches | ||