Join us to learn from expert speakers, network with like-minded professionals and stay ahead in the ever-evolving world of Cyber Security

Welcome to the official YouTube channel of the OWASP London Chapter: https://www.owasp.org/london This channel features recorded talks from our events. We aim to run #OWASPLondon Chapter Events eve...

Join us to learn from expert speakers, network with like-minded professionals and stay ahead in the ever-evolving world of Cyber Security

YouTube video by OWASP London

YouTube video by OWASP London

YouTube video by OWASP London

"Protecting Trust Boundaries in Agentic AI: Defending Against Prompt Injection and Context Poisoning" - Diana Kelley Agentic AI systems introduce new attack surfaces where prompt injection and context poisoning bypass traditional controls. In these architectures, all inputs collapse into a single c

"An overview and comparison of OWASP SAMM and DSOMM" - Timo Pagel Many practitioners struggle to understand how OWASP Software Assurance Mautiry Model (SAMM) and OWASP DevSecOps Maturity model (DSOMM) differ and where they overlap. In this session, I’ll provide a high-level overview of each model,

Securing Claude Code: Guardrails for AI-Assisted Development - Jim Manico AI coding assistants are now part of software development, but most teams still deploy them without meaningful security controls. This talk shows how to use Claude Code safely in real engineering environments through proper r

The Cambrian Explosion of Agentic AI SMEs - Dinis Cruz The talk argues that agentic GenAI is enabling a Cambrian explosion of small, focused companies across every area of business. The volume of custom and customised applications is about to explode, driving demand for more developers and engineer

The Great SAST Dissonance: How To Please Every Audience At Scale - Claudio Merloni SAST tools hit a sour note with modern apps with a dissonant coverage that leaves stretches of code unheard: a dangerous sense of security. An AI conductor can fine-tune the orchestration for each application, lettin

YouTube video by OWASP London

YouTube video by OWASP London

YouTube video by OWASP London

Join us to learn from expert speakers, network with like-minded professionals & stay ahead in the ever-evolving world of AI & Cyber Security

"Defending Your Public PKI Estate: A ten-step program to achieve best-in-class security" - Ivan Ristić On the Internet, all security is controlled by digital certificates, but there is a critical flaw at the heart of our PKI: any Certification Authority (CA) can issue a certificate for any of your

"Find It, Hack It, Fix It: Secure Development with Agent Skills" - Simon Maple Abstract: In this session we'll hack an application on stage showing secrets extraction, NoSQL injection, using real payloads, then fix it and run the same attacks again to prove it holds. We'll do this using Agent Skill

The Attacker’s Lens: The Hidden Path to Large-Scale LLM Exploits As AI-powered agents rapidly expand across applications, they introduce a fundamentally new and largely unprotected attack surface. This talk explores how prompt injection evolves from a targeted technique into a scalable, internet-wi

YouTube video by OWASP London

"Vesta CP Admin Takeover - Exploiting reduced seed entropy in bash $RANDOM" - Adrian Tiron Vesta is a lightweight, web-based control panel that simplifies Linux server management, appealing to users seeking an intuitive alternative to traditional platforms like cPanel and Plesk. This presentation w

North Korean spies are lurking everywhere, but especially in the hiring pipeline. Disguised as the perfect candidate to try and snag a technical /cyber security position in a company where they can espionage away! Recruitment is the first point of contact for all candidates so in this talk I will g

Securing AI Agents: Identity Strategies for Safe API Access - Gary Archer As organizations adopt AI-driven tools and workflows, new security challenges arise around how AI agents securely access APIs. In this session, Gary explores how best practices for connecting AI agents to APIs are evolving, a

Join us to learn from expert speakers, network with like-minded professionals and stay ahead in the ever-evolving world of Cyber Security

YouTube video by OWASP London

YouTube video by OWASP London

YouTube video by OWASP London

**This event is kindly sponsored by Nuaware.** **Raffle prizes are kindly sponsored by GitGuardian and Docker.** **There is limited seating available for in-person attende

"Securing Vibe Coding: Addressing the Security Challenges of AI-Generated Code" - Sonya Moisset As AI coding tools become embedded in daily development, they bring a new wave of productivity, and new security risks. In this session Sonya breaks down the security implications of Vibe Coding and shar

"30 Tips for Secure JavaScript" - Tanya Janca In this talk, we will cover 30 tips for writing more secure JavaScript, emphasizing what to do, what NOT to do, and utilizing open-source tooling to enhance security. JavaScript is not only the most popular web programming language, but it also faces se

"Deep Dive into the OWASP Top 10 for Agentic Applications" - John Sotiropoulos Join John Sotiropoulos from the OWASP GenAI Security Project's Agentic Security Initiative (ASI) for an in-depth look at the upcoming OWASP Top 10 for Agentic Applications. This session will explore the key risks and mit

APOLOGIES FOR SOME AUDIO ISSUES(ECHO) IN THE VIDEO "AI Agents Gone Rogue? Building, Defending and Attacking AI Agents" - Dr Katie Paxton Fear Welcome to the AI era: LLMs are dead, long live agentic AI! But uhh what is agentic AI anyway? Well for a lot of the sci fi loving nerds out there it's basi

Video Streaming Portal des Chaos Computer Clubs

**This event is kindly hosted by Tessl.** **Raffle prizes are kindly sponsored by Semgrep and Root.** **There is limited seating available for in-person attendees. Regist