NJ SECON 2026 - When AI Agents Go Rogue: Hacking and Hardening Autonomous Apps - 14th Talk
Presented at NJ SECON 2026 at Kean University, this talk explores how autonomous AI agents can be manipulated and exploited...
Application Security Expert & Speaker
Sharing insights from 15+ years of Application Security experience through conference talks, technical deep-dives, and practical security guidance.
OSWE
OSCP
CISSP
15+ Years Experience
Speaking Highlights
🎤 Speaking & Conferences (14)
Recent talks and presentations at security conferences
AI Dev Summit NYC 2026 - AI Agents Under Attack: Breaking and Securing Autonomous AI Applications - 13th Talk
Presented at DeveloperWeek New York + AI DevSummit 2026, this talk tears down a deliberately vulnerable AI agent — exploiting...
OWASP BASC 2026 - TLS, Tokens, and Trouble: Preparing Modern Applications for the Quantum Era - 12th Talk
Presented at OWASP BASC (Boston Application Security Conference) 2026, this talk demystifies quantum computing for AppSec professionals and provides a...
NJ WEA 2026 - Passwords Are Failing: How to Protect Yourself and Your Organization Using Password Managers and Passkeys - 11th Talk
Returning to the NJWEA Annual Seminar at Sheraton Eatontown NJ, this talk covers why passwords are failing and how organizations...
ISC2 & IIA Joint Cyber/AI Training Day 2025 - LLMsec: A Practical Guide to Attacks and Mitigations - 10th Talk
Presented at the first-ever joint ISC2 & IIA New Jersey training day, this talk was specifically adapted for auditors and...
BSides Delaware 2025 - LLMsec 2025: A Practical Guide to Attacks and Mitigations - 9th Talk
Presented at BSides Delaware 2025, Delaware’s premier grassroots cybersecurity conference, this hands-on talk explores practical LLM security vulnerabilities and defensive...
HOPE_16 2025 - Quantum Computing and AppSec: Preparing for the Post- Quantum Threat - 8th Talk
Presented at HOPE_16, the historic 16th Hackers On Planet Earth conference, this talk explores the quantum computing threat to modern...
SECON NJ 2025 - Quantum Computing and AppSec: Preparing for the Post-Quantum Threat - 7th Talk
Presented at SECON NJ 2025, New Jersey’s premier cybersecurity conference, this talk addresses the quantum computing threat to application security...
IEEE SSIT 2025 - Cybersecurity, AI, and Human Rights: A Societal Perspective - 6th Talk
Presented for IEEE SSIT (Society on Social Implications of Technology), this webinar explores the critical intersection of cybersecurity, AI, and...
IEEE ISEC 2025 - Building Secure Applications - 5th Talk
Presented at the 15th IEEE Integrated STEM Education Conference at Princeton University, this talk inspires the next generation of developers...
NJ WEA 2025 - Securing Critical Infrastructure: Challenges and Controls - 4th Talk
Presented at the NJ Water Environment Association Annual Conference, this talk addresses the critical challenges of securing water and wastewater...
Conf42 DevOps 2025 - Mobile Application Security Assessments Automation with MobSF and Jenkins pipeline - 3rd Talk
This post has the slides related to my talk in the Conf42 DevOps 2025 Conference
BSides Philly - Hacking OAuth : An Attacker’s View of Your OAuth Flows
This is my Second public speaking opportunity and first in BSidesPhilly Security Conference. This post has the slides.
First Talk - BSides Delaware Talk and Training Slides
I gave my first talk and training in BSides Delaware. This post has the slides, files related to that
🎓 Trainings & Courses (3)
Security training materials and educational content
LLMSec Demo: Interactive Security Training Platform for LLM Vulnerabilities
An open-source educational platform demonstrating vulnerable vs. defended LLM integration patterns with live examples of prompt injection, RAG poisoning, and...
BSidesCharm 2025 - Web Application Penetration Testing Training
Three-hour hands-on training at BSidesCharm 2025 covering practical web application penetration testing techniques, from OWASP Top 10 exploitation to defensive...
First Talk - BSides Delaware Talk and Training Slides
I gave my first talk and training in BSides Delaware. This post has the slides, files related to that
💡 Recent Tutorials & Articles (1)
Technical guides and security best practices
iOS Applications Penetration Testing Notes
This is my notes that I took during my iOS Application Penetration Testing over the years. !!!!
Recent posts
NJ SECON 2026 - When AI Agents Go Rogue: Hacking and Hardening Autonomous Apps - 14th Talk
Presented at NJ SECON 2026 at Kean University, this talk explores how autonomous AI agents can be manipulated and exploited through real-world attack scenar...
AI Dev Summit NYC 2026 - AI Agents Under Attack: Breaking and Securing Autonomous AI Applications - 13th Talk
Presented at DeveloperWeek New York + AI DevSummit 2026, this talk tears down a deliberately vulnerable AI agent — exploiting over-permissioned tools, unvet...
OWASP BASC 2026 - TLS, Tokens, and Trouble: Preparing Modern Applications for the Quantum Era - 12th Talk
Presented at OWASP BASC (Boston Application Security Conference) 2026, this talk demystifies quantum computing for AppSec professionals and provides a pract...
NJ WEA 2026 - Passwords Are Failing: How to Protect Yourself and Your Organization Using Password Managers and Passkeys - 11th Talk
Returning to the NJWEA Annual Seminar at Sheraton Eatontown NJ, this talk covers why passwords are failing and how organizations and individuals can move to...
LLMSec Demo: Interactive Security Training Platform for LLM Vulnerabilities
An open-source educational platform demonstrating vulnerable vs. defended LLM integration patterns with live examples of prompt injection, RAG poisoning, an...
ISC2 & IIA Joint Cyber/AI Training Day 2025 - LLMsec: A Practical Guide to Attacks and Mitigations - 10th Talk
Presented at the first-ever joint ISC2 & IIA New Jersey training day, this talk was specifically adapted for auditors and compliance professionals to un...
BSides Delaware 2025 - LLMsec 2025: A Practical Guide to Attacks and Mitigations - 9th Talk
Presented at BSides Delaware 2025, Delaware’s premier grassroots cybersecurity conference, this hands-on talk explores practical LLM security vulnerab...
HOPE_16 2025 - Quantum Computing and AppSec: Preparing for the Post- Quantum Threat - 8th Talk
Presented at HOPE_16, the historic 16th Hackers On Planet Earth conference, this talk explores the quantum computing threat to modern cryptography and pract...
SECON NJ 2025 - Quantum Computing and AppSec: Preparing for the Post-Quantum Threat - 7th Talk
Presented at SECON NJ 2025, New Jersey’s premier cybersecurity conference, this talk addresses the quantum computing threat to application security an...