On October 3rd, 2025 Cyber Cheyenne will be holding its annual security conference sponsored by The Wyoming and Northern Colorado chapters of The Information Systems Security Association (ISSA).

I will be giving my talk:

Trust, But Verify: Securing the AI Supply Chain Before It Secures You

As artificial intelligence becomes a core part of cyber security infrastructure – powering threat detection, anomaly analysis, and automated response – many organizations are unknowingly inheriting new risks. Pre-trained models, open-source components, and cloud-based inference APIs often form the hidden backbone of AI tools, yet few security teams apply the same rigor to vetting these elements as they would with traditional software dependencies. This talk explores the emerging risks in the AI supply chain: from poisoned training data and backdoored models, to malicious libraries and unauthorized model access. We’ll break down how adversaries can exploit these vulnerabilities and what defenders can do to protect against them. Attendees will leave with a practical framework for assessing AI supply chain risk, lessons learned from real-world case studies, and actionable steps for building trustworthy AI systems—especially in resource-constrained environments. Whether you’re deploying LLMs in the SOC or integrating machine learning into internal tools, this session will show why securing your AI stack is now a critical part of your overall cyber security strategy.

The conference is being held Cheyenne, WY so if you’re in the area please stop by and say hello.

You can register for the event here.