

Bhawani Singh
Bhawani Singh Solution Engineer Team Lead
Checkmarx
Biography
Bhawani is a seasoned professional with over 15 years of leadership experience in the cybersecurity. His expertise encompasses areas like Application Security, DevSecOps, Compliances and Secure Software Development Life Cycle (SDLC). He is skilled in designing and implementing secure software programs. He is also known for his confident and creative leadership style, emphasizing innovative IT security solutions and a commitment to meeting business challenges. In his current role as the Principal Architect and Sales Engineering Lead at Checkmarx, Bhawani is responsible for addressing various application security challenges faced by customers. He plays a crucial role in developing secure coding programs, focusing on regions as Middle East, Africa, and Indian peninsula. His work involves direct engagement with developers, quality assurance teams, and CISO organizations of customer companies, aiming to enhance their Application Security posture. In addition to his professional skills, Bhawani enjoys playing badminton and basketball in his leisure time. Bhawani loves to talk about on application security needs, emerging market trends, badminton, and solution engineering.
Topic Name & Synopsis
AI Package Hallucinations : A new threat to Supply Chain Security
90% of the code in Apps today comes from Open Source Software. Whether through infiltrating the software delivery pipeline, deliberately uploading malicious components to popular repositories, or taking advantage of existing vulnerabilities in open source components, attackers are leveraging gaps in supply chain controls to compromise organizations. With GenAI quickly becoming a popular tool for developers to generate code, a new threat has emerged. AI package hallucinations is one of the more recent attack types within supply chain that is easy to execute and can have devastating effects. During this presentation we will give an overview of Supply Chain Security with some examples of the current threats, discuss AI package hallucinations, and preventative measures.