The open source community is waking up to a terrifying new reality where "trust" is being weaponized by sophisticated adversaries who are playing the long game to backdoor the very foundations of our digital infrastructure. Josh Bressers, Vice President of Security at Anchore, warns that while we’re busy chasing complex AI-driven exploits, the real danger lies in our collective failure to support the 99% of projects maintained by a single, overworked individual. To survive this era of "trust but verify," organizations must move beyond simply running scanners and start actively contributing to the community, because no amount of money can fix a supply chain that we aren't willing to help protect from the inside out.
Up Next in KubeCon 2026 Amsterdam
-
Taming Multi-Cloud Complexity and Sov...
The days of managing clouds in accidental isolation are over, as multi-cloud has shifted from an unintended consequence of acquisitions to a deliberate boardroom strategy driven by data sovereignty and AI needs. Dirk Alshuth, from emma Technologies, explains how their platform is unifying these f...
-
The Sandbox Solution: Closing the AI ...
The traditional "it worked on my machine" excuse is finally hitting the scrap heap as high-fidelity local emulators like LocalStack allow developers to replicate complex AWS and Snowflake environments right on their laptops. Waldemar Hummer, CEO of LocalStack, explains that in the age of AI, thes...
-
Why Kubernetes Still Needs VM Infrast...
The narrative that Kubernetes would eventually kill the virtual machine has officially been debunked, as the industry wakes up to the reality that managing bare-metal clusters at scale is a complex and costly nightmare. Weigue He, Sr. Director of Product Marketing at Broadcom, explains how VMware...
