Microsoft Threat Intelligence Podcast
Supply Chain Attacks: Open Source or Open Door?
· 39 min · Season 3 Episode 70
Show notes
In this episode of the Microsoft Threat Intelligence Podcast, host Sherrod DeGrippo is joined by Allie Luhrs and Mario Samolis from Microsoft Security to explore the growing threat of open source software supply chain attacks. They discuss how malicious NPM packages, compromised developer ecosystems, AI-generated attacks, and software dependency risks are reshaping modern incident response, while sharing insights from their recent presentation at BlueHat IL 2025.
In this episode you’ll learn:
How attackers are targeting open source software ecosystems at scale
Why AI is accelerating…
