Tessera
Folgen

OWASP London Chapter

@owasplondon.bsky.social

#OWASP London Chapter Follow us on X/Facebook/Meetup/Eventbrite/LinkedIN/YouTube. Mastodon: https://infosec.exchange/@owasplondon 🌐 Webpage: https://owasp.org/london 👋 Meetup: https://meetup.com/OWASP-London 📺 YouTube: https://youtube.com/OWASPLondon

78 Posts942 Follower34 Folgt
OWASP London Chapter@owasplondon.bsky.social · last wk.

The next OWASP London Chapter meetup [IN-PERSON] will take place on September 28th 2026 at 6pm. Talks from Chris Holman and Glyn Wintle. This event is kindly hosted by @Civo tech Junction and kindly sponsored by @aikidosecurity.bsky.social Register to attend here: 👇

OWASP London Chapter meetup [IN-PERSON]

Join us to learn from expert speakers, network with like-minded professionals and stay ahead in the ever-evolving world of Cyber Security

eventbrite.co.uk

OWASP London Chapter@owasplondon.bsky.social · 2mo ago

Many thanks to Diana Kelley for presenting her talk: "Protecting Trust Boundaries in Agentic #AI: Defending Against Prompt Injection and Context Poisoning" at #OWASP London meetup last week! The video recording is now available on our YouTube Channel: 👇

Protecting Trust Boundaries: Defending Against Prompt Injection and Context Poisoning - Diana Kelley

"Protecting Trust Boundaries in Agentic AI: Defending Against Prompt Injection and Context Poisoning" - Diana Kelley Agentic AI systems introduce new attack surfaces where prompt injection and context poisoning bypass traditional controls. In these architectures, all inputs collapse into a single c

youtube.com

OWASP London Chapter@owasplondon.bsky.social · 2mo ago

Many thanks to Timo Pagel for presenting his talk: "An overview and comparison of OWASP SAMM and DSOMM" at the #OWASP London Chapter meetup last week. The recording of the talk is now available to watch on our YouTube channel (please subscribe!): 👇

OWASP SAMM vs OWASP DSOMM: An Overview And Comparison - Timo Pagel

"An overview and comparison of OWASP SAMM and DSOMM" - Timo Pagel Many practitioners struggle to understand how OWASP Software Assurance Mautiry Model (SAMM) and OWASP DevSecOps Maturity model (DSOMM) differ and where they overlap. In this session, I’ll provide a high-level overview of each model,

youtube.com

OWASP London Chapter@owasplondon.bsky.social · 5mo ago

Many Thanks to Jim Manico for presenting his talk/live demo: "Securing Claude Code: Guardrails for AI-Assisted Development" at our April 14th event! The video recording of the talk is now available on the #OWASPLondon YouTube Channel (please subscribe!): 👇

Securing Claude Code: Guardrails for AI-Assisted Development - Jim Manico

Securing Claude Code: Guardrails for AI-Assisted Development - Jim Manico AI coding assistants are now part of software development, but most teams still deploy them without meaningful security controls. This talk shows how to use Claude Code safely in real engineering environments through proper r

youtube.com

OWASP London Chapter@owasplondon.bsky.social · 5mo ago

Many Thanks to Dinis Cruz for presenting his talk: "The Cambrian Explosion of Agentic AI SMEs" at our April 14th event. The video recording of the talk is now available on the #OWASPLondon YouTube Channel [PLEASE SUBSCRIBE!]: 👇

The Cambrian Explosion of Agentic AI SMEs - Dinis Cruz

The Cambrian Explosion of Agentic AI SMEs - Dinis Cruz The talk argues that agentic GenAI is enabling a Cambrian explosion of small, focused companies across every area of business. The volume of custom and customised applications is about to explode, driving demand for more developers and engineer

youtube.com

OWASP London Chapter@owasplondon.bsky.social · 5mo ago

Many Thanks to Claudio Merloni for presenting his talk: "The Great #SAST Dissonance: How To Please Every Audience At Scale" at our April 14th event. The video recording of the talk is now available on the #OWASPLondon YouTube Channel: 👇

The Great SAST Dissonance: How To Please Every Audience At Scale - Claudio Merloni

The Great SAST Dissonance: How To Please Every Audience At Scale - Claudio Merloni SAST tools hit a sour note with modern apps with a dissonant coverage that leaves stretches of code unheard: a dangerous sense of security. An AI conductor can fine-tune the orchestration for each application, lettin

youtube.com

OWASP London Chapter@owasplondon.bsky.social · 6mo ago

Many thanks to Ivan Ristic for presenting his talk: "Defending Your Public PKI Estate: A ten-step program to achieve best-in-class security" at our March 31st event! The video recording of the talk is now available on our YouTube Channel [PLEASE SUBSCRIBE!] 👇

Defending Your Public PKI Estate: A ten-step program to achieve best-in-class security - Ivan Ristic

"Defending Your Public PKI Estate: A ten-step program to achieve best-in-class security" - Ivan Ristić On the Internet, all security is controlled by digital certificates, but there is a critical flaw at the heart of our PKI: any Certification Authority (CA) can issue a certificate for any of your

youtube.com

OWASP London Chapter@owasplondon.bsky.social · 6mo ago

Many Thanks to Simon Maple for presenting his talk/live demo: "Find It, Hack It, Fix It: Secure Development with AI Agent Skills" at our March 31st event. The video recording of the talk is now available on the #OWASPLondon YouTube Channel [PLEASE SUBSCRIBE!] 👇

Find It, Hack It, Fix It: Secure Development with AI Agent Skills - Simon Maple

"Find It, Hack It, Fix It: Secure Development with Agent Skills" - Simon Maple Abstract: In this session we'll hack an application on stage showing secrets extraction, NoSQL injection, using real payloads, then fix it and run the same attacks again to prove it holds. We'll do this using Agent Skill

youtu.be

OWASP London Chapter@owasplondon.bsky.social · 6mo ago

Many Thanks to Amir Shahmiri for presenting his talk: "The Attacker’s Lens: The Hidden Path to Large-Scale LLM Exploits" at our March 31st event. The video recording of the talk is now available on the #OWASPLondon YouTube Channel [PLEASE SUBSCRIBE!] 👇

The Attacker’s Lens: The Hidden Path to Large-Scale LLM Exploits - Amir Shahmiri

The Attacker’s Lens: The Hidden Path to Large-Scale LLM Exploits As AI-powered agents rapidly expand across applications, they introduce a fundamentally new and largely unprotected attack surface. This talk explores how prompt injection evolves from a targeted technique into a scalable, internet-wi

youtube.com

OWASP London Chapter@owasplondon.bsky.social · 6mo ago

Many thanks to Adrian Tiron for presenting his talk: "Vesta Admin Takeover - Exploiting reduced seed entropy in bash $RANDOM" at our Feb 26th meetup! The video recording of the talk is now available on the #OWASPLondon YouTube Channel [PLEASE SUBSCRIBE!] 👇

Vesta Admin Takeover - Exploiting reduced seed entropy in bash $RANDOM - Adrian Tiron

"Vesta CP Admin Takeover - Exploiting reduced seed entropy in bash $RANDOM" - Adrian Tiron Vesta is a lightweight, web-based control panel that simplifies Linux server management, appealing to users seeking an intuitive alternative to traditional platforms like cPanel and Plesk. This presentation w

youtube.com

OWASP London Chapter@owasplondon.bsky.social · 6mo ago

Many thanks to Mariya Hristova for presenting her talk: "North Korea: The Great Recruitment Firewall" at our Feb 26th meetup. The video recording of the talk is now available to watch 📷 on the #OWASPLondon YouTube Channel [PLEASE SUBSCRIBE!] 👇

North Korea: The Great Recruitment Firewall - Mariya Hristova

North Korean spies are lurking everywhere, but especially in the hiring pipeline. Disguised as the perfect candidate to try and snag a technical /cyber security position in a company where they can espionage away! Recruitment is the first point of contact for all candidates so in this talk I will g

youtube.com

OWASP London Chapter@owasplondon.bsky.social · 6mo ago

Many thanks to Gary Archer for presenting his talk: "Securing AI Agents: Identity Strategies for Safe API Access" at our Feb 26th meetup. The video recording of the talk is available to watch 📷 on the #OWASPLondon YouTube Channel [PLEASE SUBSCRIBE!]: 👇

Securing AI Agents: Identity Strategies for Safe API Access - Gary Archer

Securing AI Agents: Identity Strategies for Safe API Access - Gary Archer As organizations adopt AI-driven tools and workflows, new security challenges arise around how AI agents securely access APIs. In this session, Gary explores how best practices for connecting AI agents to APIs are evolving, a

youtube.com