Open Web Application Security Project San Diego (OWASP-SD)

With a turnover of multiple million USD per year, the Russian ransomware crew Black Basta was one of the biggest threat actors. But their software had bugs which ultimately allowed for the recover of encrypted files without paying the ransom. This talk describes the threat actor, their flaw, and the recovery.

Speaker: Tobias Mueller is a cybersecurity expert with over a decade of experience spanning academia, applied research, and consulting. He holds a PhD in cryptography, is a CISSP and OSCP as well as a certified ISO 27001 auditor. Tobias supports clients in the financial and insurance sectors with red teaming, incident response, SOC design, compliance, and third-party risk management.

Come hang out and socialize with the local cyber community. All are welcome!

Topic: Model Context Protocol (MCP) servers let you connect specialized tools directly into AI-powered IDEs like Cursor. This talk walks through building an MCP server for Volatility (a framework for extracting artifacts from memory dumps) and getting it running. Once you see how it works, you can apply the same approach to automate repetitive command-line tasks in your own workflow.

Speaker: Martyna Paruch is an engineer finishing her M.S. in Cybersecurity Engineering at USD. She studied Computer Science and Economics at UW-Madison. Martyna likes to build things, including Chat2Learn (a UChicago-supported educational app) and the REACH Pathways platform for the non-profit Chicago Scholars. She's open to work.

Join us for an engaging meetup talk on the OWASP DevSecOps Maturity Model (DSOMM), a practical framework for integrating security into DevOps pipelines across four progressive levels—from basic awareness to fully automated, high-maturity practices.

## Talk Overview

Discover how DSOMM assesses maturity in key dimensions like infrastructure, CI/CD, testing, and monitoring, helping teams identify gaps and achieve metrics such as <24-hour vulnerability response times.

## Key Benefits

• Shift-left security to reduce bottlenecks and false positives.
• Roadmap for automation, threat modeling, and compliance in modern SDLCs.

Speaker: Christian Dehoyos