Talks·51 min
Brenton House
Gives API developers a quick overview of the Model Context Protocol, its architecture, and its security risks.
aiarchitectureapplication+2
Talks LASCON 2025
Austin, TX, USA · October 2025 · 50 talks
Talks from LASCON 2025.
Filters+
1–24 of 49 talks / 50
Talks·41 min
Andrew Hoog
Presents the five most significant mobile app risks drawn from over half a million automated dynamic assessments of iOS and Android apps.
mobileriskprivacy+2
Talks·50 min
Marcus Carey
Argues for using LLMs in cybersecurity work, with demos of automation, tabletop exercises and agent-style tooling.
aiautomationdefensive-security+2
Talks·53 min
Joy Curtis
Explains how a project manager's AI deployments in regulated sectors reveal red and green flags around data, outputs and explainability.
aimanagementlessons-learned+2
Talks·47 min
Shannon Lietz
Explores how agentic AI will reshape DevSecOps pipelines, using metrics, adversary profiles and threat models as guides.
aiappsecrisk+2
Talks·32 min
Akshay Mittal
Surveys how AI tools strengthen cloud-native DevSecOps and runtime defense, and how attacks like prompt injection threaten AI systems.
aicloudappsec+2
Talks·48 min
Matt Tesauro
Separates AI hype from practical gains in application security, using an MCP server for DefectDojo as the working example.
aiappsectool+2
Talks·50 min
Josiah Hagen
Applies Big Five personality testing to several LLMs to show how prompt tone shifts their self-assessed traits.
aimachine-learningmonitoring+2
Talks·42 min
Sam Stepanyan
Shows how the open-source OWASP Nettacker scanner maps networks, finds exposed services and chains scan modules.
vulnerabilitiesnetworktool+3
Talks·40 min
Mike Biocchi
Explains why computer science programs leave graduates without security skills and what schools and employers can do.
learningdeveloperlessons-learned+2
Talks·52 min
Rico Komenda · Javan Rasokat
Pairs a builder and a penetration tester to show LLM prompt injection attacks alongside layered defenses for AI-integrated apps.
aiappsecvulnerabilities+2
Talks·43 min
Jeff Williams
Argues that application security needs production context and a shared model of live systems rather than castle-style fortification.
applicationriskvulnerabilities+2
Talks·47 min
Hysun Chung
Shows how a human reviewer can pair with an AI tool to run staged secure code reviews and keep them current.
appsecaicode+2
Talks·55 min
Kadi McKean
Walks developers through evaluating open source dependencies for security, licensing, tampering and maintenance risk before adoption.
open-sourcerisktrust+2
Talks·46 min
Dean Bushmiller
Explains how to pick among hundreds of cybersecurity certifications and build a career plan around them.
learningcertificationcareer-planning+2
Talks·38 min
Andy Lewis
Shows how Python pickle files can hide executable code inside machine learning models shared on public hubs.
aimachine-learningmalware-analysis+2
Talks·47 min
Akash Rajeev Bhatia · Milind Daftari
Explores how embedding security into AI-assisted coding and MCP-connected tools can reduce friction in DevSecOps pipelines.
appsecaiopen-source+2
Talks·48 min
Tomer Yahalom · Tal Skverer
Explains the OWASP Non-Human Identity Top 10 ranking, real breaches, AI agent impacts, and a live cloud credential attack demo.
owaspidentitycloud+2
Talks·48 min
Eitan Worcel
Shows how a prompt-driven pipeline filters false positives and generates verifiable code fixes, and where AI remediation still fails.
aiappsecautomation+2
Talks·56 min
Michael Gough
Shows how a layered home backup power setup held up through a tornado and a multi-day grid outage, and where it failed.
lessons-learnedincident-responseinfrastructure+2
Talks·50 min
Patrick Walsh
Shows how LLM, RAG and vector database features leak private data through repeated queries, embedding inversion and prompt injection.
aimachine-learningprivacy+2
Talks·50 min
Anitha Dakamarri
Examines how AI could change application security work, from threat modeling and code review to DAST and pentesting.
aiappsecapplication+2
Talks·49 min
Jenn Gile
Shows security leaders how marketing methods can help them understand stakeholders and win buy-in for their programs.
managementteaminterview+2
Talks·48 min
Bertold Kolics
Shows how identity threat detection and response spots account takeover and fraud from authentication event logs.
identitythreat-detectionincident-response+1