How AI is Breaking Open-Source: Are You Accidentally Shipping Malware? | International Cyber Expo LIVE

We lock our front doors every night, yet we surrender the keys to our businesses, finances, and personal lives to complete strangers the moment convenience calls. You do not need to write a single line of code or work in technology to understand this trap: whether you are sitting in an executive boardroom, leading a household, or managing an engineering sprint, our collective addiction to moving faster has replaced real diligence with blind trust. In enterprise tech, this reality is hitting a breaking point. The average organisation now runs on third-party code that nobody on the internal team actually wrote or verified. With AI coding tools supercharging the pace of deployment, teams are unknowingly pulling in dozens of unvetted, nested dependencies. Attackers no longer need to breach perimeters; they simply hide malicious code inside trusted names and wait for busy people to install it. Warren Atkinson and Justin (Jay) Adamson sat down live at the International Cyber Expo at Olympia London with David Hunt (Chief Organiser, ICE) and Nate Dunning (Co-Founder & CEO, Ossprey Security) to expose the software supply chain blind spot, why legacy scanners miss live exploits, and how to protect developers without grinding business momentum to a halt. A massive thank you to Ossprey Security for partnering with us to sponsor this on-site ICE special edition series. Inside this episode: • The Hidden Dependency Crisis: Why installing a single API tool can silently pull in hundreds of nested packages, and how threat actors weaponise open-source repositories through typosquatting and maintainer takeovers. • Flaws vs Active Exploits: Why a CVE is merely a potential flaw, whereas a malicious package is an active attack executing the moment it is downloaded- and why traditional signature tools miss them entirely. • Ending Alert Fatigue: How burying developers under thousands of false positives destroys security culture, and how Ossprey achieved a benchmark 0.001% false-positive rate inside native developer workflows. • Founder Resilience & Scaling: The reality behind securing an oversubscribed £2M+ ($2.65M) pre-seed round, the power of founder-led customer feedback, and sustaining personal well-being in high-pressure environments. Featured Guests: David Hunt: Chief Organiser of the International Cyber Expo (Nineteen Group), dedicated to uniting global leaders across governent, critical national infrastructure, and enterprise tech to drive cross-industry resilience. Nate Dunning: Co-Founder & CEO of Ossprey Security. Backed by over 15 years leading incident response, MSSP operations, and enterprise data security Nate has spent his whole career on the defensive side of security. He trained as an engineer, then found he was better at breaking things than building them. That led him into security operations and incident response, where he spent more than five years and worked his way up into leadership. After moving to the UK, he led Security Operations and Incident Response at Funding Circle after its IPO. He then joined Starling Bank and built its data security function. Having seen software supply chain risk first-hand in financial services, Nate co-founded Ossprey in London in 2024 to stop malicious open source code before it reaches engineers, CI pipelines and AI agents. Explore Ossprey Security and access their 30-day Early Bird Programme: 👉 https://www.ossprey.com/early-bird The £1M Enterprise AI Challenge: Community support is essential, but it doesn't always pay for the practical help required to fix infrastructure problems. Through SECURE | CYBER CONNECT, we are deploying £100,000 in fully funded, hands-on cybersecurity and AI infrastructure support to TEN selected individuals, leaders, and nonprofits. 🎟️ Register Your Interest Here: https://docs.google.com/forms/d/e/1FAIpQLScdcQpsUsBp50krYU_IW3rMcuw-Kk5RYATMp5lCA1vfwvObEA/viewform Connect with Warren here: https://www.linkedin.com/in/warren-atkinson/