Talks·48 min
Kyle King
Explores how generative AI lowers the bar for phishing, deepfakes and faster attacks, and how defenders can respond.
aithreatphishing+2
Talks RVAsec 14
Richmond, VA, USA · June 2025 · 28 talks
Talks from RVAsec 14 (2025).
1–24 of 28 talks
Talks·49 min
Nicholas Popovich · Mike Bailey
Shows how misconfigured ServiceNow deployments enable privilege escalation and code execution, and how defenders can detect them.
attackinfrastructuredetection+2
Talks·48 min
Dan Holden
Looks ahead at how the CISO role may shift toward business-focused risk communication, quantification, and board accountability.
managementrisktrust+1
Talks·35 min
Michael Roytman
Argues that enterprises should train risk models on their own data and shows how local models can outperform global vulnerability scoring.
machine-learningriskvulnerabilities+2
Talks·49 min
Bobby Turnage Jr.
Explains the legal and practical considerations an organization faces when managing a data breach and how to prepare.
incident-responseriskmanagement+2
Talks·49 min
John Stoner
Shows how the GraphRunner toolkit maps to Entra ID and Office 365 attack stages and the logs that reveal them.
identitycloudthreat-detection+2
Talks·50 min
Nick Copi
Shows how JavaScript JSON path libraries allow sandbox escapes and remote code execution across widely used products.
vulnerability-researchopen-sourcevulnerabilities+3
Talks·51 min
Christopher Cruz
Presents a government view of public interest cybersecurity and a layered framework for delivering it to communities.
infrastructureriskframework+3
Talks·44 min
Jeremy Dorrough
Shows how security staff can frame costs and returns in financial terms to win budgets from non-technical stakeholders.
riskmanagementlessons-learned
Talks·50 min
Revisits internal domain name collisions, where private DNS names overlap with public ones and create security risk.
networkinfrastructureattack+1
Talks·54 min
David Young
Describes day-to-day security work on internal teams and as a consultant, from scoping to reporting.
teammanagementlessons-learned+2
Talks·38 min
Alain Petit
Explains how key types, life cycle stages and key handling decide whether encryption claims in vendor products hold up.
managementrisktrust+1
Talks·51 min
Morgan Stuart
Walks through running open-weight LLMs locally and the risks they introduce, including poisoning, prompt injection and agentic tool use.
aimachine-learningattack+2
Talks·51 min
Vennard Wright
Explores how camera-based AI is used for public safety and where its privacy, bias and legal risks lie.
aiprivacymachine-learning+2
Talks·38 min
Kevin Massey
Walks through a kernel CTF challenge, from initial recon and source review to heap leaks and kernel ROP.
linuxkernelexploitation+2
Talks·44 min
Christina Johns
Shows how malware triage can progress through scripts, static tools, sandboxes, and YARA before any disassembly.
malware-analysisreverse-engineeringdetection+2
Talks·27 min
Tells the story of one person helping a friend move out of homelessness.
lessons-learnedsociallearning
Talks·45 min
Travis Altman
Explains how to turn purple teaming from a concept into a working service, including roles, exercise types and reporting.
detectionincident-responsedefensive-security+2
Talks·32 min
Caleb Crable
Shows how permissive SPF records on vendor subdomains let attackers spoof email, and how to find them.
phishingattackinfrastructure+2
Talks·54 min
Stacy Aitken
Explains why an incident response plan matters and what it should cover, from communication chains to insurance and compliance needs.
incident-responseriskmanagement+2
Talks·50 min
Matthew Fisher
Walks through fast, low-effort internal network tactics for harvesting credentials and escalating toward domain admin.
attacknetworkwindows+2
Talks·49 min
Paul Asadoorian
Argues that security professionals benefit from using Linux as their daily desktop, with myth-busting and practical tips.
linuxopen-sourcelessons-learned+2
Talks·36 min
Olivia Gallucci
Walks through finding, building and reversing Apple's open source macOS components as a starting point for internals research.
open-sourcereverse-engineeringvulnerability-research+2