Live Leadership Insights:
Software Supply Chain with Chainguard CTO
Securing the software we build, deploy, and depend upon every day.
- Tuesday 24th November
- 🇬🇧 10:00AM - 11:00AM UK | 🇦🇪 2:00PM - 3:00PM UAE
- Virtual Session
The Challenge: Vulnerability in Our Digital Foundations
The recent PHP2Shell vulnerabilities provide a timely reminder of just how exposed the software underpinning our digital world can be. With two critical vulnerabilities in PHP creating the potential for remote code execution, organisations were forced to assess their exposure, rapidly apply patches, and temporarily take services offline.
This raises a much bigger question: how much confidence do we really have in the software we build, deploy, and depend upon every day?
The Discussion: Securing the Software Supply Chain
As organisations accelerate software development, embrace cloud-native technologies, and increasingly adopt AI, the software supply chain is becoming an increasingly important part of the cyber security conversation.
The Featured Speakers
John Dee
Director of Strategy
Somerford Associates
About John
After a 35-year career in the British Army’s Intelligence Corps, rising from Private to Lieutenant Colonel, John joined Somerford Associates in 2019 as Strategy Director. In this role, he translates strategic business risks into technology solutions for public and private sectors.
A dedicated advocate for the military community, John heads the Somerford Veterans Network, manages a 1,600-member military networking group, and has personally mentored over 350 defense personnel into civilian employment in the past year.
Tim Chinchen
Field CTO
Chainguard
About Tim
Tim Chinchen leads Sales Engineering for EMEA at Chainguard, working with engineering and security teams on securing open source software at the source rather than patching it later.
Most of his career has been on the operations side. He ran global presales organisations at PagerDuty and AppDynamics, and spent enough years around production incidents to form fairly firm views on what holds up under pressure and what does not. He has stayed hands-on throughout, more recently with LLM and agentic tooling.
The problem he is focused on now is speed. AI-assisted development has made code cheap to produce and dependencies easy to accumulate, and scanning and patching after the fact was already struggling to keep up before any of that started.
What We Will Explore
- What the PHP2Shell vulnerabilities tell us about the risks hidden within our software infrastructure.
- Why open-source dependencies and software vulnerabilities remain such a significant challenge.
- How organisations can establish greater trust in the software they use and deploy.
- The importance of secure-by-design approaches, trusted software artefacts, and hardened container images.
- How AI is changing software development and introducing new security considerations.
- What technology and security leaders should be doing differently moving forward.