Chainguard Engineer Patrick Smyth Discusses Open Source Security in the AI Era: Mitigating Attacks with SLSA and Sigstore
Patrick Smyth of Chainguard discusses how frontier AI has altered the economics of cyberattacks, leading to exploits often landing before patches. He analyzes supply chain malware waves, explains why 30-day remediation windows fail, and proposes defensive strategies including cooldown periods, faster CVE fixes, and signing everything with SLSA and Sigstore.
In the context of rapid AI development, the landscape of cybersecurity offense and defense is undergoing profound changes. In an interview about open source security, Patrick Smyth of Chainguard delves into how frontier AI makes attackers more dangerous and the challenges this poses to traditional security response mechanisms.
Smyth points out a significant current trend: "exploits now land before the patch." As AI-assisted tools lower the cost of discovering and developing vulnerabilities, the traditional 30-day remediation window no longer holds up. He reviews this year's waves of AI-assisted attacks and supply chain malware, emphasizing the systemic risks these new threats pose to open source infrastructure.
To address this situation, Smyth proposes covering four main attack surfaces: malware, known CVEs, zero days, and "side doors" like CI/CD, developer laptops, and agent skills. He recommends adopting more proactive defensive measures, including implementing cooldown periods to slow down automated attacks, accelerating CVE fix processes, and signing all build artifacts using SLSA (Supply-chain Levels for Software Artifacts) and Sigstore to ensure supply chain integrity.
Additionally, the episode discusses hardening agent skills, a new attack vector emerging with the proliferation of AI agents. For professionals focused on open source security and cloud-native infrastructure, this episode offers specific response strategies and technical perspectives from a frontline practitioner.