Open Source, AI and the New Attack Surface

Open source and artificial intelligence are redefining the software security landscape. As AI accelerates development and exploitation, the open-source ecosystem has become a powerful engine of innovation and a growing attack surface. In this SafeDev Talks episode, security leaders from Red Hat, TikTok, and Xygeni (https://xygeni.io/) break down how AI-driven threats are targeting open-source dependencies, pipelines, and machine learning models, and what defenders must do to stay ahead. Featuring 𝐑𝐨𝐦𝐚𝐧 𝐙𝐡𝐮𝐤𝐨𝐯 (𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 & 𝐏𝐫𝐢𝐯𝐚𝐜𝐲 𝐋𝐞𝐚𝐝𝐞𝐫, 𝐑𝐞𝐝 𝐇𝐚𝐭),𝐋𝐞𝐨𝐧 𝐉𝐨𝐡𝐧𝐬𝐨𝐧 (𝐎𝐟𝐟𝐞𝐧𝐬𝐢𝐯𝐞 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 & 𝐏𝐫𝐢𝐯𝐚𝐜𝐲 𝐋𝐞𝐚𝐝, 𝐓𝐢𝐤𝐓𝐨𝐤), 𝐚𝐧𝐝 𝐋𝐮𝐢𝐬 𝐑𝐨𝐝𝐫í𝐠𝐮𝐞𝐳 𝐁𝐞𝐫𝐳𝐨𝐬𝐚 (𝐂𝐓𝐎, 𝐗𝐲𝐠𝐞𝐧𝐢), this session explores how AI is reshaping open-source software security, from AI-driven supply chain attacks and real-world exploitation examples to weaponized code, dependency poisoning, and model manipulation. The discussion highlights how AppSec and DevSecOps teams can leverage AI for detection and auto-remediation, along with best practices for securing OSS dependencies and machine learning models within CI/CD pipelines. You’ll also learn how to build AI-native, resilient, and transparent software supply chains, supported by expert insights from leaders securing high-scale, global platforms. This session delivers practical guidance for AppSec engineers, DevSecOps practitioners, security architects, and platform teams building applications in the AI era. ⭐ Key Takeaways • Understand the new AI-powered attack surface in open source • Detect and mitigate AI-driven OSS supply chain threats • Apply AI responsibly for vulnerability detection and remediation • Strengthen software supply chain resilience with modern security controls • Learn from experts securing AI-native systems in production This episode is essential for anyone focused on: AI Security, Open Source Security, Software Supply Chain Security, DevSecOps, AppSec, ML Security, CI/CD Security, and Continuous Security. Subscribe to SafeDev Talks and follow Xygeni (  / xygeni  ) for more insights on AI Security, DevSecOps, and secure software development. #SafeDevTalks #OpenSourceSecurity #AISecurity #AppSec #DevSecOps #SoftwareSupplyChain #CyberSecurity #OSS #ThreatDetection #SecurityAutomation #MLSecurity #AIThreats #SecureByDesign #ContinuousSecurity #Xygeni