Sharing insights from 16+ years of Application Security experience through conference talks, technical deep-dives, and practical security guidance.
Recent talks and presentations at security conferences
Presented at the OWASP Foundation 25th Anniversary Virtual Conference, this talk walks two live attack paths in the Model Context...
Presented at the Boardwalk Bytes Information Security Conference 2026 in Atlantic City, this talk walks four real attack paths in...
Presented at NJ SECON 2026 at Kean University, this talk explores how autonomous AI agents can be manipulated and exploited...
Presented at DeveloperWeek New York + AI DevSummit 2026, this talk tears down a deliberately vulnerable AI agent — exploiting...
Presented at OWASP BASC (Boston Application Security Conference) 2026, this talk demystifies quantum computing for AppSec professionals and provides a...
Returning to the NJWEA Annual Seminar at Sheraton Eatontown NJ, this talk covers why passwords are failing and how organizations...
Presented at the first-ever joint ISC2 & IIA New Jersey training day, this talk was specifically adapted for auditors and...
Presented at BSides Delaware 2025, Delaware’s premier grassroots cybersecurity conference, this hands-on talk explores practical LLM security vulnerabilities and defensive...
Presented at HOPE_16, the historic 16th Hackers On Planet Earth conference, this talk explores the quantum computing threat to modern...
Presented at SECON NJ 2025, New Jersey’s premier cybersecurity conference, this talk addresses the quantum computing threat to application security...
Presented for IEEE SSIT (Society on Social Implications of Technology), this webinar explores the critical intersection of cybersecurity, AI, and...
Presented at the 15th IEEE Integrated STEM Education Conference at Princeton University, this talk inspires the next generation of developers...
Presented at the NJ Water Environment Association Annual Conference, this talk addresses the critical challenges of securing water and wastewater...
This post has the slides related to my talk in the Conf42 DevOps 2025 Conference
This is my Second public speaking opportunity and first in BSidesPhilly Security Conference. This post has the slides.
I gave my first talk and training in BSides Delaware. This post has the slides, files related to that
Security training materials and educational content
An open-source educational platform demonstrating vulnerable vs. defended LLM integration patterns with live examples of prompt injection, RAG poisoning, and...
Three-hour hands-on training at BSidesCharm 2025 covering practical web application penetration testing techniques, from OWASP Top 10 exploitation to defensive...
I gave my first talk and training in BSides Delaware. This post has the slides, files related to that
Technical guides and security best practices
This is my notes that I took during my iOS Application Penetration Testing over the years. !!!!
Presented at the OWASP Foundation 25th Anniversary Virtual Conference, this talk walks two live attack paths in the Model Context Protocol’s trust mod...
Presented at the Boardwalk Bytes Information Security Conference 2026 in Atlantic City, this talk walks four real attack paths in enterprise AI assistant ad...
Presented at NJ SECON 2026 at Kean University, this talk explores how autonomous AI agents can be manipulated and exploited through real-world attack scenar...
Presented at DeveloperWeek New York + AI DevSummit 2026, this talk tears down a deliberately vulnerable AI agent — exploiting over-permissioned tools, unvet...
Presented at OWASP BASC (Boston Application Security Conference) 2026, this talk demystifies quantum computing for AppSec professionals and provides a pract...
Returning to the NJWEA Annual Seminar at Sheraton Eatontown NJ, this talk covers why passwords are failing and how organizations and individuals can move to...
An open-source educational platform demonstrating vulnerable vs. defended LLM integration patterns with live examples of prompt injection, RAG poisoning, an...
Presented at the first-ever joint ISC2 & IIA New Jersey training day, this talk was specifically adapted for auditors and compliance professionals to un...
Presented at BSides Delaware 2025, Delaware’s premier grassroots cybersecurity conference, this hands-on talk explores practical LLM security vulnerab...