Shadow AI: The New Supply Chain Disruptor
A presentation at Identity Shield, Pune in in Pune, Maharashtra, India by Anant Shrivastava
Shadow AI The New Supply Chain Disruptor Anant Shrivastava Founder
About Cyfinoid ● Research focused cyber security firm ● Major focus areas as of now ● Software Supply Chain ● Cloud Security https://cyfinoid.com/ © Cyfinoid Research 2
Anant Shrivastava ● Chief researcher @ Cyfinoid Research ● 15+ yrs of corporate exposure ● Speaker / Trainer: BlackHat, Defcon, c0c0n, nullcon & more ● Project Lead: ● ○ Code Vigilant (code review project) ○ Hacking Archives of India (@anantshri on social platforms) https://anantshri.info © Cyfinoid Research 3
World has changed © Cyfinoid Research 4
The flow we all need to know © Cyfinoid Research 5
Shadow’s of all kind © Cyfinoid Research 6
Production © Cyfinoid Research 7
Current way of handling it © Cyfinoid Research 8
Inventory the systems © Cyfinoid Research 9
Operational Loop © Cyfinoid Research 10
Angles to Discover © Cyfinoid Research 11
Shadow AI : Risk Classification © Cyfinoid Research 12
Carrots and Sticks © Cyfinoid Research 13
Incentive Loop © Cyfinoid Research 14
Relook at your role © Cyfinoid Research 15
Thanks for listening & open to Questions? © Cyfinoid Research 16
Trainings & Research Web Application | Cloud | Supply Chain Trainings Attacking Software Supply Chain | Attacking Cloud Environments Contact us at contact@cyfinoid.com (C) Cyfinoid Research © Cyfinoid Research 17
Artificial Intelligence is no longer a background helper—it has become a participant in our software supply chains. Tools like Cursor, Windsurf, and other AI-powered IDEs can now generate code, recommend dependencies, suggest infrastructure, and even automate deployments. On the surface this looks like productivity magic. Under the hood, it is a supply chain disruptor.
