The Software Supply Chain Just Got Harder to See

Open-source supply chain attacks are back in the news, and the pattern is familiar: a trusted package, a compromised account, hundreds of malicious updates pushed downstream before anyone noticed.

What's changing is the exposure on multiple fronts. Open-source components are in nearly every application. AI components are being wired in alongside them, often with no inventory of what they are or where they came from. And code being written by AI is shipping faster than ever, raising a question few teams are asking: when AI writes the code, does anyone actually know what it pulled in?

Get insights from Alan Shimel, CEO of TechStrong, and Checkmarx experts for a direct conversation on where software supply chain risk stands in 2026, why the visibility problem is getting harder, and what security leaders can do about it now.

• Understand how AI-generated code is reshaping SSC risk and why traditional visibility approaches are no longer sufficient.
• Learn how to identify hidden open-source and AI dependencies before they become security liabilities.
• Discover practical strategies for creating and maintaining a comprehensive inventory of software components across modern development environments.