DeveloperWeek 2025: Full Schedule

arrow_back View All Dates

9:30am PST

[Virtual] OWASP Security Summit: OWASP Top 10 Risks to LLM Applications - A Developer’s View

Thursday February 20, 2025 9:30am - 9:55am PST

VIRTUAL Dev Security World

Krishna Sankar, U.S. Bank, SVP/Distinguished Engineer
OWASP Certified

Speakers

Krishna Sankar

SVP/Distinguished Engineer, U.S. Bank

SVP/Distinguished Engineer − Generative AI Red Teaming, Guardrails & Explainability @ U.S.Bank Krishna is a Technologist with broader experience in AI, Data Science, Security and Networks. Working on building intelligence - may be even a JARVIS ! Love to write, teach and develop... Read More →

Thursday February 20, 2025 9:30am - 9:55am PST
VIRTUAL Dev Security World https://app.events.ringcentral.com/events/developerweek-productworld-ai-devworld-2025/reception

Dev Security World

Tracks & Topics Gen AI / LLMs
Session Type PRO Session
Conferences Dev Security World, OWASP Certified, Virtual, OPEN Session
In-Person/Virtual Virtual

10:00am PST

[Virtual] OWASP Security Summit: Breaking Down Silos: Enhancing Security in AppSec Programs

Thursday February 20, 2025 10:00am - 10:25am PST

VIRTUAL Dev Security World

Aruneesh Salhotra, Seasoned Technologist
OWASP Certified

In today’s interconnected world, organizational silos pose a significant challenge to effective application security (AppSec). These silos—rooted in specialization, control structures, and cultural divides—impede communication and collaboration, weakening overall security efforts.
This presentation will explore the causes and impacts of organizational silos on security programs and demonstrate how breaking these barriers can strengthen coordination and foster a unified security culture. Attendees will gain insights into why silos form, their detrimental effects on security initiatives, and actionable strategies to overcome them.
Few Key Takeaways:
Understanding Silos: How specialization and cultural divides create barriers.
Impact on Security: The risks silos introduce to AppSec programs.
Practical Strategies: Approaches such as cross-functional training, creating shared security visions, and initiating collaborative initiatives to dismantle silos.
Building a Unified Culture: Empowering every team member, not just the security team, to contribute to application security.

Speakers

Aruneesh Salhotra

Seasoned Technologist

Aruneesh Salhotra is a seasoned technologist and servant leader, renowned for his extensive expertise across cybersecurity, DevSecOps, AI, Business Continuity, Audit, Sales. His impactful presence as an industry thought leader is underscored by his contributions as a speaker and panelist... Read More →

Thursday February 20, 2025 10:00am - 10:25am PST
VIRTUAL Dev Security World https://app.events.ringcentral.com/events/developerweek-productworld-ai-devworld-2025/reception

Dev Security World

Tracks & Topics Technical Leadership & Management
Session Type OPEN Session
Conferences Dev Security World, OWASP Certified, Virtual, OPEN Session
In-Person/Virtual Virtual

10:30am PST

[Virtual] OWASP Security Summit: The Security-Developer Love Story: Moving from ‘No’ to ‘Let’s Go'

Thursday February 20, 2025 10:30am - 10:55am PST

VIRTUAL Dev Security World

Wendy Segura, Sage, Security Engineer
Andra Lezza, Sage, Principal Application Security Specialist
OWASP Certified

Speakers

Andra Lezza

Principal Application Security Specialist, Sage

Andra is a Principal Application Security Specialist at Sage, with over seven years of experience in the field of application security. She is responsible for implementing DevSecOps practices, conducting security assessments, and developing secure coding guidelines for software engineering... Read More →

Wendy Segura

Security Engineer, Sage

Wendy Segura is a Security Engineer at Sage who specializes in building secure, scalable technology solutions. With over a decade of experience in cybersecurity, process optimization, and security client advisor she focuses on developing robust security frameworks, conducting comprehensive... Read More →

Thursday February 20, 2025 10:30am - 10:55am PST
VIRTUAL Dev Security World https://app.events.ringcentral.com/events/developerweek-productworld-ai-devworld-2025/reception

Dev Security World

Session Type OPEN Session
Conferences Dev Security World, OWASP Certified, Virtual, OPEN Session
In-Person/Virtual Virtual

11:00am PST

CANCELLED -- [Virtual] OWASP Security Summit: F*** Security: We’ll do it Live

Thursday February 20, 2025 11:00am - 11:50am PST

VIRTUAL Dev Security World

Jason Haddix, Arcanum Information Security, CEO, CISO, and “Hacker in Charge”
OWASP Certified

Security at the speed of dev, making secure choices in design, and making security invisible and easy for developers for any size org

Speakers

Jason Haddix

CEO, CISO, and “Hacker in Charge”, Arcanum Information Security

Jason Haddix AKA jhaddix is the CEO, CISO, and “Hacker in Charge” at Arcanum Information Security. Arcanum is a world class assessment and training company. Jason also holds the title of Field CISO for Flare.io a world class threat intelligence platform. Jason has had a distinguished... Read More →

Thursday February 20, 2025 11:00am - 11:50am PST
VIRTUAL Dev Security World https://app.events.ringcentral.com/events/developerweek-productworld-ai-devworld-2025/reception

Dev Security World

Session Type OPEN Session
Conferences Dev Security World, OWASP Certified, Virtual, OPEN Session
In-Person/Virtual Virtual

1:00pm PST

[Virtual] OWASP Security Summit: OWASP SamuraiWTF for All the Developer Ninjas

Thursday February 20, 2025 1:00pm - 1:25pm PST

VIRTUAL Dev Security World

Kevin Johnson, Secure Ideas, Chief Executive Officer
Jason Gillam, Secure Ideas, CIO
OWASP Certified

The best security training environment for Developers and AppSec Professionals

Speakers

Jason Gillam

CIO, Secure Ideas

Jason Gillam is Chief Information Officer (CIO) at Secure Ideas and an IANS faculty member. He has over 20 years of industry experience in enterprise software development, system architecture, and application security. Jason has spent most of his career in technical leadership roles... Read More →

Kevin Johnson

Chief Executive Officer, Secure Ideas

Kevin Johnson is the Chief Executive Officer of Secure Ideas. Kevin has a long history in the IT field including system administration, network architecture and application development. He has been involved in building incident response and forensic teams, architecting security solutions... Read More →

Thursday February 20, 2025 1:00pm - 1:25pm PST
VIRTUAL Dev Security World https://app.events.ringcentral.com/events/developerweek-productworld-ai-devworld-2025/reception

Dev Security World

Tracks & Topics Developer Experience (DX)
Session Type OPEN Session
Conferences Dev Security World, OWASP Certified, Virtual, OPEN Session
In-Person/Virtual Virtual

1:30pm PST

[Virtual] OWASP Security Summit: Securing Python Lab

Thursday February 20, 2025 1:30pm - 1:55pm PST

VIRTUAL Dev Security World

Guled Abdilahi, Staff Engineer
OWASP Certified

In this lightning talk, we’ll explore some of the most frequent pitfalls Python developers encounter that can lead to security vulnerabilities. You'll learn how to quickly identify these issues and implement practical solutions to address them.
We'll also showcase a selection of open-source tools and resources designed to streamline your development workflow and enhance the security of your projects. Whether you're a beginner or a seasoned developer, this talk will provide actionable insights to help you write better, safer Python code.

Speakers

Guled Abdilahi

Staff Engineer

Guled Abdilahi has spent the past decade building and defending software systems across diverse industries, including fintech, telecommunications, media, and entertainment. From working hands-ons with developers to secure petabytes-scale data pipelines to directly securing millions... Read More →

Thursday February 20, 2025 1:30pm - 1:55pm PST
VIRTUAL Dev Security World https://app.events.ringcentral.com/events/developerweek-productworld-ai-devworld-2025/reception

Dev Security World

Session Type OPEN Session
Conferences OWASP Certified, Dev Security World, Virtual, OPEN Session
In-Person/Virtual Virtual

2:00pm PST

[Virtual] OWASP Security Summit: 15 Ways to Break Microsoft Copilot

Thursday February 20, 2025 2:00pm - 2:25pm PST

VIRTUAL Dev Security World

Tamir Ishay Sharbat, Zenity, Software Engineer
OWASP Certified

Microsoft Copilot Studio is the technology that powers Microsoft's copilots, and the platform behind custom copilots built in the enterprise. The promise is that everyone can build a secure copilot, under the assumption that every bot will be secure by-default. Does it hold under scrutiny?

In this talk, we will show how Copilot Studio bots can easily be used to exfiltrate sensitive enterprise data circumventing existing controls like DLP. We will show how a combination of insecure defaults, over permissive plugins and wishful design thinking makes data leakage probable, not just possible. We will analyze how Copilot Studio puts enterprise data and operations in the hands of GenAI, and expose how this exacerbates the prompt injection attack surface, leading to a material impact on integrity and confidentiality.

Next, we will drop CopilotHunter, a recon and exploitation tool that scans for publicly accessible Copilots and uses fuzzing and GenAI to abuse them to extract sensitive enterprise data. We will share our findings targeting thousands of accessible bots, revealing sensitive data and corporate credentials.

Finally, we will offer a path forward by sharing concrete configurations and mistakes to avoid on Microsoft's platform, and generalized insights on how to build secure and reliable Copilots. Security at the speed of dev, making secure choices in design, and making security invisible and easy for developers for any size org

Speakers

Tamir Ishay Sharbat

Software Engineer, Zenity

Tamir Ishay Sharbat is a Software Engineer focused on AI with Zenity

Thursday February 20, 2025 2:00pm - 2:25pm PST
VIRTUAL Dev Security World https://app.events.ringcentral.com/events/developerweek-productworld-ai-devworld-2025/reception

Dev Security World

Session Type OPEN Session
Conferences Dev Security World, OWASP Certified, Virtual, OPEN Session
In-Person/Virtual Virtual

3:00pm PST

[Virtual] OWASP Security Summit: How to be a Security Champion

Thursday February 20, 2025 3:00pm - 3:25pm PST

VIRTUAL Dev Security World

Marisa Fagan, Katilyst, Head of Product
OWASP Certified

Speakers

Marisa Fagan

Head of Product, Katilyst

Thursday February 20, 2025 3:00pm - 3:25pm PST
VIRTUAL Dev Security World https://app.events.ringcentral.com/events/developerweek-productworld-ai-devworld-2025/reception

Dev Security World

Session Type OPEN Session
Conferences Dev Security World, OPEN Session, Virtual, OWASP Certified
In-Person/Virtual Virtual