Exploits Now Beat Patches: Open Source Security in the AI Era - Patrick Smyth, Chainguard

Frontier AI has made every attacker a level more dangerous, and on average, exploits now land before the patch. Patrick Smyth of Chainguard covers this year's AI-assisted attacks and supply chain malware waves, why 30-day remediation windows no longer hold up, the four attack surfaces to cover (malware, known CVEs, zero days and "side doors" like CI/CD, developer laptops and agent skills), and what to do now: cooldown periods, faster CVE fixes, and signing everything with SLSA and Sigstore. Chapters: 0:00 Intro 0:58 AI-powered attacks this year 2:33 Exploits now arrive before patches 3:45 Why