MU.SCL S03E07 – Trusting the System: Zero Trust and Supply Chain Attacks
We trust that an authenticated and authorised user, or AI agent, will act as expected. We trust the software our teams install, the updates our systems receive and the dependencies our applications rely on.
But what happens when that trust is misplaced?
For the next Mauritius Cyber Security Club event, we will look at two sides of that question:
The limits of Zero Trust in the age of agentic AI, and the risks that can enter an organisation through its software supply chain.
MU.SCL S03E07 - Trusting the System will take place on Tuesday, 10 November 2026, at 6:00 PM, at the Flying Dodo in Bagatelle, Mauritius.
REGISTER FOR FREE HERE
Talk 1 – Zero Trust: Is Zero Really Zero?
Sylvain Martinez – ElysiumSecurity
Zero Trust has changed how organisations approach access to systems and information. Rather than assuming that someone inside the network can be trusted, access decisions are based on factors such as identity, device and context, and can be reassessed as conditions change.
But Zero Trust has not removed trust. It has concentrated it around those decisions.
This raises an interesting question when we introduce agentic AI. An agent may have a valid identity, operate from an approved environment and be authorised to use a particular tool. Yet it may still misunderstand an instruction, pursue the wrong objective or take an action with unintended consequences.
The access decision may be correct, while the outcome is not.
So, what does that mean for Zero Trust? Are our current approaches enough when the entity receiving access can make its own decisions? And how do we control what an agent does after it has been authorised?
This talk will explore those questions and what they mean for organisations adopting AI agents.
Note: this presentation was originally planned for last month event, but we ran out of time!
Talk 2 – Supply Chain Attack
Julien Virey – OceanDBA
Organisations rely on a growing number of external suppliers, software packages, tools and services. Each of them can introduce a dependency and potentially a path into the organisation.
Supply chain attacks have evolved beyond the compromise of a traditional supplier: A malicious package, a compromised update or a dependency installed automatically can affect teams and systems that never had a direct relationship with the original source of the problem.
The challenge is not limited to knowing which suppliers an organisation uses, it also involves understanding what its people install, what its applications depend on and what its automation brings into the environment.
This talk will look at the recent evolution of supply chain attacks, how teams and automation may be exposed, and the practical steps organisations can take to reduce the risk without bringing development to a halt.
Join the discussion
MU.SCL is a free cybersecurity event open to technical and non-technical participants.
It is an opportunity to learn, ask questions, exchange experiences and meet other members of the Mauritian cybersecurity community.
Event details
REGISTER FOR FREE HERE