Talks·40 min
Covers a set of cybersecurity fraud settlements totaling $52 million.
riskmanagementlessons-learned
June 2026 · Richmond, VA, USA
RVAsec 15
1 session · 29 talks
Sessions at this event
All RVAsec 15 talks
1–24 of 28 talks / 29
Talks·46 min
Victoria Mosby
Shows how to reshape technical security findings into business-risk narratives that prompt executives to make a decision.
riskmanagementframework+1
Talks·45 min
David Reign
Explains how modern AI models learn from data, read text, generate images and reason, and where they fail.
aimachine-learningmodel+1
Talks·37 min
Ryan Bird
Explores how SOC teams can fit AI agents into analysis workflows and the new attack paths automated defenses open.
aisecurity-operationsdefensive-security+2
Talks·48 min
Argues that alert fatigue is often misdiagnosed rather than simply caused by too many alerts.
security-operationsthreat-detectiondefensive-security
Talks·45 min
Covers modern attacks on OAuth, OIDC and JWT authentication flows and how they can be abused.
identitywebvulnerabilities+1
Talks·45 min
Heather Antoinetti
Shows security professionals how to share their expertise and build influence without self-promotion or corporate posturing.
networksociallearning+2
Talks·40 min
Evan Typanski
Shows how Zeek scripts and Spicy parsers can catch a Redis replication exploit that loads a malicious module.
threat-detectionnetworkopen-source+2
Talks·46 min
Ryan O'Donnell
Shows how canary messages and files in Outlook and SharePoint can flag attackers or insiders searching for data after token theft.
threat-detectionclouddetection+2
Talks·37 min
Chelsea Bryan
Argues that peer connections and team trust help security staff handle incidents and avoid burnout.
teammanagementsecurity-operations+1
Talks·36 min
Argues that understanding other people works better through empathy than through assuming you can read their minds.
teamlessons-learnedlearning
Talks·44 min
Paul Brownridge
Shows how chatbot agents on public websites can be coaxed into leaking client data through prompt manipulation and encoding tricks.
aiwebappsec+2
Talks·47 min
Andrew Skatoff
Shows how an agentic LLM pipeline turns threat intelligence reports into validated Sigma detection rules.
threat-detectionintelligenceai+2
Talks·46 min
Nancy Coblenz
Explains how data center power and infrastructure ownership shape data security, jurisdiction and governance for security teams.
infrastructurerisktrust+2
Talks·50 min
Examines how customized IDE distributions can be attacked and where their security weaknesses tend to sit.
developerapplicationvulnerabilities+2
Talks·47 min
Brian Cardinale
Demonstrates how voice AI agents can be probed and manipulated over phone calls, using a repeatable red-teaming method.
aiattackmachine-learning+2
Talks·50 min
Mike Bailey · Ariyan Suroosh
Explains how red teams combine phone pretexting, spoofed caller ID and self-hosted telephony to gain initial access.
phishingsocialattack+2
Talks·54 min
Sherrod DeGrippo
Uses the film 2001: A Space Odyssey to examine how AI reshapes threats and the human role in defense.
aithreatdefensive-security+1
Talks·49 min
Michael Darling
Reframes security as risk management, showing how compliance can be built on technical foundations to communicate trust.
riskmanagementtrust+2
Talks·43 min
Covers how to protect AI systems and the training and operational data that feeds them.
aimachine-learningdata-protection+1
Talks·50 min
Brian Markham
Argues that third-party risk programs should aim for reasonable assurance and trust, and proposes ways to cut assessment effort.
riskmanagementtrust+2
Talks·51 min
Jeff Man
Looks back at decades of information security challenges and argues that many core problems have not changed.
lessons-learnedriskmanagement+2
Talks·46 min
Aqeel Yaseen
Explains a six-step troubleshooting method and how its ideas apply to work, relationships and everyday life.
lessons-learnedlearningpractical+1