About this talk
This talk explores the emerging threat of supply chain attacks, referencing over 20,000 CVEs filed in Q2 2025. The speaker, Brandon Wu, presents an innovative internal tool that integrates deterministic callgraph-based methods with selective LLM reasoning to develop Semgrep rules, significantly reducing the time security researchers devote to processing CVEs. The session emphasizes the importance of enhancing supply chain defense mechanisms in the face of escalating vulnerabilities.
More from this event
See all 91 talks →
BSidesSF 2026 - Opening Remarks (Sunday) (Reed Loden)
14:36
BSidesSF 2026 - Follow the data to learn the secret (Dylan Ayrey)
35:17
BSidesSF 2026 - Not My Vibe: When AI Coding Agents Go Off the Rails (Aonan Guan, Zhengyu Liu)
45:56
BSidesSF 2026 - "Ask the EFF" Panel (Panel)
45:30