AI supply chain and vendor risk

🎙️ Coffee, Chaos and ProdSec, Ep 23

AI security keeps getting talked about, but incident response, supply chain risk, and people are still treated like someone else’s problem.

So this week, Kurt and Cameron grab their mugs and spend the episode walking through what actually happens when AI systems misbehave, agents start acting outside expectations, and traditional security playbooks stop lining up with reality.

From AI specific incident response that doesn’t fit existing SOC workflows, to Software Supply Chain Security risks hiding in models, vendors, and embedded SaaS features, this episode gets into where things really break once AI is in production.

They also dig into why AI training across teams matters more than most controls, how shadow AI keeps showing up in unexpected places, and why compliance pressure around AI is no longer theoretical as regulations and accountability get real.

If you work in Cybersecurity, Application Security, Product Security, DevSecOps, or you’re trying to prepare your org for AI incidents, audits, and uncomfortable questions, this episode will sound very familiar.

☕ New episodes every Wednesday.

Coffee, Chaos and ProdSec -> strong coffee, stronger opinions.