Alice in Supply Chains

← Alice in Supply Chains6 apr · 57 min

Episode #15, March 2026

Episode #15, March 20266 apr57 min

<p><em>Recorded April 1, 2026 — post-RSA 2026 edition</em><br>Hosts <a href="https://www.linkedin.com/in/adrian-sanabria/" target="_blank" rel="noopener noreferer">Adrian Sanabria</a> (The Defenders Initiative) and <a href="https://www.linkedin.com/in/sieira/" target="_blank" rel="noopener noreferer">Alexandre Sieira </a>(CTO and Cofounder, <a href="https://www.tenchisecurity.com/en?_gl=1*plg7sl*_ga*MTU3MTc2NzE0My4xNzc1NDczNDM3*_ga_Q6MBLVT4CZ*czE3NzU0NzM0MzckbzEkZzAkdDE3NzU0NzM0MzckajYwJGwwJGgwJGRhbUpnckNYWmMxU2ZNV3Fzc1VTRnF4bTBzUDZWeUpVRXNB" target="_blank" rel="noopener noreferer">Tenchi Security</a>) reconvene — both recovering from the notorious con crud — to dig into the biggest stories from a packed month in third-party and supply chain security.<br>This month, we have two main stories:<br></p><ul><li>The ongoing Delve controversy and data leaks</li><li>Our RSAC Conference 2026 takeaways</li></ul><ol><li>Alex’s ESW Appearance <a href="http://securityweekly.com/esw452" target="_blank" rel="noopener noreferrer">securityweekly.com/esw452</a></li><li>The episode we did with AJ Yawn on issues with SOC 2 reports <a href="https://www.tenchisecurity.com/en/alice-in-supply-chains/episode-7-hoxz2" target="_blank" rel="noopener noreferrer">https://www.tenchisecurity.com/en/alice-in-supply-chains/episode-7-hoxz2</a></li><li>Tony Martin-Vegue’s excellent “acting rationally, given the incentives” take on the Delve scandal <a href="https://www.linkedin.com/posts/tonymartinvegue_i-know-youre-tired-of-the-delve-discourse-activity-7441294170406891520-UtGg" target="_blank" rel="noopener noreferrer">https://www.linkedin.com/posts/tonymartinvegue_i-know-youre-tired-of-the-delve-discourse-activity-7441294170406891520-UtGg</a></li><li>Adrian’s blog with his RSAC Conference 2026 takeaways <a href="https://www.defendersinitiative.com/p/i-watched-all-11-main-stage-keynotes" target="_blank" rel="noopener noreferrer">https://www.defendersinitiative.com/p/i-watched-all-11-main-stage-keynotes</a></li><li>Alex Sieira’s RSAC talk with Alex Pinto (login required to watch the recording) <a href="https://path.rsaconference.com/flow/rsac/us26/FullAgenda/page/catalog/session/1755192044047001WRoa" target="_blank" rel="noopener noreferrer">https://path.rsaconference.com/flow/rsac/us26/FullAgenda/page/catalog/session/1755192044047001WRoa</a></li><li>Adrian Sanabria and Adam Shostack’s talk on Breach Transparency from RSAC <a href="https://path.rsaconference.com/flow/rsac/us26/FullAgenda/page/catalog/session/1756101254392001bKZA" target="_blank" rel="noopener noreferrer">https://path.rsaconference.com/flow/rsac/us26/FullAgenda/page/catalog/session/1756101254392001bKZA</a></li><li>Tenchi’s ‘near miss’ report <a href="https://www.tenchisecurity.com/en/insights-news/secure-practices-trivy-supply-chain-attack" target="_blank" rel="noopener noreferrer">https://www.tenchisecurity.com/en/insights-news/secure-practices-trivy-supply-chain-attack</a><br></li></ol>