Security In An Open World
2026-03-19 14:00 - 15:00 (Asia/Kolkata)
Join us on March 19th 2026 for a chat with Abhishek Chauhan, who leads Sonatype India.
Millions of software developers trust Sonatype to keep their open source codebases, libraries, and dependencies safe. This is one of the oldest companies securing the software supply chain.
India is home to one of the world’s fastest-growing developer communities and is rapidly emerging as a key market for AI-driven software development. The demand for building, consuming, and securing code is reaching unprecedented levels as organizations accelerate their adoption of modern technologies.
At the same time, the country continues to produce exceptional engineering talent, making it a global hub for innovation and technical expertise. Given these factors, India presents a compelling opportunity for Sonatype to deepen its innovation and talent footprint.
Another important topic is the Security Slam event! We will spend a little time talking about what the event is, what Sonatype aims to achieve, and how best you can participate in this.
Guest: Abhishek Chauhan
Senior Director, Sonatype
Date: 19th March 2025
Time: 2 pm to 3 pm IST

Handing Over The Keys to Your Kingdom: AI-Driven Security Woes
2026-04-09 18:00 - 19:00
The current security landscape reveals a dangerous paradox: the very tools we trust to secure our code—AI agents and DevSecOps utilities—possess the broadest permissions but the weakest oversight. We are currently witnessing a “credential-drift” crisis where automated tools are becoming the primary vectors for supply chain contagion.
To prevent the next cascade, we must move away from reactive patching and toward a Closed-Loop Integrity System.
The last 14 days have highlighted a systemic failure in how we manage “privileged automation.” Trivy, Axios, LiteLLM, OpenAI Codex, and Claude Code have all fallen prey to various supply chain attacks.
We are handing the “keys to the kingdom” to AI agents and automated scanners that are, by nature, high-value targets. If you aren’t monitoring your security tools with the same intensity you use for your production databases, you aren’t running a secure shop—you’re just waiting for the next cascade.
Join this talk to learn more about how you can prevent supply chain security failures in your AI world.

Guest: Himanshu Sangshetti
Date: Thursday, 9th April 2025
Time: 6 PM IST

Sword and Shield: Security Strategy Needs Both Offense & Defense
2026-05-21 14:00 - 15:00
In the world of software development, security is often treated like the “veggies” of the SDLC—everyone knows they’re good for you, but most developers would rather just skip straight to the dessert (shipping code). But what happens when the “bad guys” decide to join the party uninvited?
In this episode, we sit down with two titans of the industry to see what happens when the irresistible force of Red Teaming meets the immovable object of Blue Teaming.
Meghana Rao, our resident VAPT and Cloud Security specialist, walks us through the art of the “friendly break-in.” She’ll explain why thinking like a villain is the only way to build a digital fortress. On the flip side, Shubham Mishra, a seasoned Threat Hunter and Insider Threat specialist, shows us how she tracks the whispers in the wires to catch intruders before they even realize they’ve been spotted.
Together, they’ll dive into the “Why” of the tandem. Join us to learn why Red and Blue aren’t rivals, but actually the ultimate “work spouses.” You will also learn how this maps to the SDLC Lifecycle. Fully understand how to bake security into your code so you aren’t trying to “bolt it on” while the house is already on fire.
Whether you’re a developer trying to understand why your security lead is crying, or a CISO looking to harmonize your teams, this episode provides the roadmap to a safer digital landscape.
Date: 21st May 2026
Time: 2 pm IST
