Thriving after the VulnPocalypse
Overview
AI has shifted the balance of attack and defense in the software supply chain. AI-assisted security audits have increased the rate of vulnerability discovery to the point where maintainer resources are being strained by the volume of reporting and review, sometimes called the ‘VulnPocalypse’. At the same time, these models can make preemptive security work an easier chore to manage. Developing maintainer skills and experience to meet the challenge of the ‘Vulnpocalypse’ is the need of the moment.
We invite the community to join us for the 2026 Software Supply Chain Community Day where industry, government, and academia can network and discuss challenges, practical solutions, and the latest software supply chain security research.
Our theme this year is ‘Thriving after the VulnPocalypse’, with a focus on what we are learning about how to apply AI to manage the AI-based increase in vulnerability discovery and reporting.
Date: Thursday, November 19
Time: 9:30AM - 4:30 PM
Place:
SAS Institute Global Education Center (GEC) Building A
107 SAS Campus Dr.
Cary, NC 27513
Agenda
| 9:30 | Welcome |
| 9:10 | Michel Cukier - Software Supply Chain Education |
| 10:00 | Keynote #1 |
| 10:30 | Keynote #2 |
| 11:00 | Break |
| 11:20 | Industry Panel: Agentic AI and the Software Supply Chain |
| 12:30 | Networking lunch (provided) and research poster session |
| 1:30 | Student Ignite presentations |
| 2:30 | Break |
| 2:45 | [Agentic AI Security] - Brett Smith, SAS Institute |
| 3:15 | [Google’s software supply chain] - Bob Callaway, Google Open Source Security |
| 3:45 | Keynote #5 |
| 4:15 | Continued networking and adjourn |