Talk Materials

Upcoming Talks

Date Conference Talk Resources
2024-11-28/29 DefCamp 2024    
2024-11-13 Ekoparty 2024 15 Ways to Break Your Copilot

Previous Talks

Date Conference Talk Resources
2024-10-30 BlueHat USA 2024 Scaling AppSec With an SDL for Citizen Development
2024-10-24 hack.lu 2024 The good, the bad, and the ugly: Microsoft Copilot (delivered by Inbar Raz)
2024-10-24 BlackHat SecTor 2024 15 Ways to Break Your Copilot (delivered by Avishai Efrat)
2024-10-23 ISS Ohio 2024 AI Empowers Your Business. What Does that Mean for Security? (delivered by Steve Shanko)
2024-09-26 OWASP Global AppSec SF 2024 Living off Microsoft Copilot
2024-08-07 BlackHat US 2024 Living off Microsoft Copilot
2024-08-07 BlackHat US 2024 15 Ways to Break Your Copilot
2024-08-07 BlackHat US Arsenal 2024 Living off the O365 land with powerpwn
2024-06-27 BSidesTLV 2024 All You Need Is Guest
2024-06-27 OWASP Global AppSec Lisbon 2024 OWASP Low-Code/No-Code Top 10
2024-05-06 x33fcon 2024 All You Need Is Guest
2024-05-06 RSAC 2024 All You Need Is Guest
2024-05-01 Caro 2024 All You Need Is Guest  
2024-04-18 t2 2024 All You Need Is Guest
2024-04-15 SANS Cybersecurity Leadership Summit UK 2024 AI is here for business users. What does that mean for AppSec?
2023-12-06 BlackHat EU Arsenal 2023 EntraID Guest to Corp Data Dump with powerpwn
2023-10-31 OWASP Global AppSec DC 2023 OWASP Low-Code No-Code Top 10
2023-10-30 OWASP Global AppSec DC 2023 Credential Sharing as a Service: the Dark Side of No Code
2023-10-26 SecTor 2023 Sure, Let Business Users Build Their Own. What Could Go Wrong?
2023-10-25 SecTor 2023 All You Need is Guest
2023-08-10 BlackHat US Arsenal 2023 PowerGuest: AAD Guest Exploitation Beyond Enumeration
2023-08-10 BlackHat US 2023 All You Need Is Guest
2023-08-09 BlackHat US 2023 Sure, Let Business Users Build Their Own. What Could Go Wrong?
2023-08-09 BSidesLV 2023 Sure, Let Business Users Build Their Own. What Could Go Wrong?
2023-08-09 BSidesLV 2023 Wolves in Windows Clothing: Weaponizing Trusted Services for Stealthy Malware
2023-08-08 BSidesLV 2023 All You Need is Guest: Beyond Enumeration
2023-05-17 OWASP AppSec IL 2023 Sure, Let Business Users Build Their Own. What Could Go Wrong?
2023-04-28 RSAC 2023 Credential Sharing as a Service: the Dark Side of No Code
2023-04-23 BSidesSF 2023 Windows 11 At Your Service
2023-04-23 BSidesSF 2023 Sure, Let Business Users Build Their Own. What Could Go Wrong?
2023-04-22 BSidesNYC 2023 Low Code High Risk: Enterprise Domination via Low Code Abuse
2023-04-18 SANS Cybersecurity Leadership Summit UK 2023 Credential Sharing as a Service: the Dark Side of No Code
2023-03-28 CodeFrenzy 2023 Credential Sharing as a Service: the Dark Side of No Code
2023-02-28 DC9723 No-Code Malware: Windows 11 At Your Service
2023-02-15 OWASP Global AppSec Dublin 2023 Credential Sharing as a Service: the Dark Side of No Code
2023-01-23 Workato IL Community Event 2023 Automated Security Governance
2023-01-05 RSAC 365 OWASP Top 10 Security Risks for Low-code/No-code
2022-11-19 BSides Orlando No-Code Malware: Windows at Your Service
2022-11-19 BSides Vienna 0x7E6 No-Code Malware: Windows at Your Service
2022-11-17 OWASP Global AppSec US 2022 Windows RCE as a Service
2022-11-02 LowCodeCon 2022 How to Govern and Secure Low-Code/No-Code Apps
2022-10-28 LASCON 2022 No Code Risk: What Happens When We Leave No Code up for Grabs
2022-09-22 BSides Singapore 2022 Malware Powered by Windows 11 No-Code
2022-09-01 OWASP Global AppSec APAC 2022 No Code Risk: What Happens When We Leave No Code up for Grabs
2022-08-31 OWASP Global AppSec APAC 2022 Dominating the Enterprise via Low Code Abuse
2022-08-13 DEFCON30 Low Code High Risk: Enterprise Domination via Low Code Abuse
2022-08-13 DEFCON30 No-Code Malware: Windows 11 At Your Service