Web Security

**Talk Abstract:** — \# Bootiful Spring Boot 4: Sweet and Sour Spring Boot 4.x and Java 25 have arrived, making it an exciting time to be a Java developer! Join us, **Josh Long** (@starbuxman) and **DaShaun Carter** (@dashaun), will dive into the future of Spring Boot with Java 25. We'll learn how to scale your applications and codebases effortlessly, explore the robust Spring Boot ecosystem featuring AI, modularity, seamless data access, security, and cutting-edge production optimizations like Project Loom's virtual threads, GraalVM, AppCDS, and more. Let's explore the latest-and-greatest in Spring Boot to build faster, more scalable, more efficient, more modular, more secure, and more intelligent systems and services and we'll look at how to get older apps to this leaner, greener future. \-\-\- **Josh Long** (@starbuxman) has been Spring's first-ever Developer Advocate since 2010. A Java Champion, author of 7 books, host of *A Bootiful Podcast*, and open-source contributor — if Spring ships it, Josh has probably already done a live demo of it. **DaShaun Carter** (@dashaun) is a Spring Developer Advocate at Broadcom, Testcontainers Champion, and keynote speaker with a passion for helping developers ship better software, faster. Whether he's on stage, on a Raspberry Pi, or on a racecourse, he brings the same deliberate, high-energy focus to everything he does. **Important:** Please share your mail address ( if you have not done already) , need it for security clearance at Redhat . Can send it to [mailto:singadev-organisers@googlegroups.com](http://mailto:singadev-organisers@googlegroups.com/) by 9 June evening. Thanks for understanding and cooperation.

**DISCLAIMER: NOT FINANCIAL ADVICE** Casual run of about 3.5km - 4km. Hais, seems like there isnt a a community run group on bitcoin in Singapore. Please visit below page to sign up (Dont pangseh hor). https://www.meetup.com/runningbitcoinsg It is the only way I can filter out the bots. There is always more things to learn about Bitcoin. One of it being low time preference. The group welcomes anyone who is interested in knowing more about saving in bitcoin or simply just want to join us to have a good run.

👋 Hello Grafana & Friends Singapore! This month, we are excited to partner with the MongoDB for a collaborative evening of tech! As observability and data landscapes become increasingly complex, the integration between the LGTM stack and MongoDB is more critical than ever. This month, we are bringing together engineers from both ecosystems to share implementation strategies, architectural best practices, and real-world monitoring patterns. As always, come ready to learn, connect, and exchange ideas with the community. Light bites and networking included! **Topic 1: Real-Time Observability with MongoDB and Grafana: From Logs to Dashboard** **Speaker: Piti Champeethong**, Senior Consulting Engineer, MongoDB **Session Abstract:** Learn how to integrate MongoDB Atlas with Azure Grafana to build real-time dashboards for both database performance and application data. This session covers Prometheus-based monitoring, direct querying, and Azure-native pipelines for modern observability. **Topic 2: Agentic Observability: From OTel Signals to Production Remediation with MongoDB MCP** **Speaker: Hendri Tjiptowibowo**, Senior Partner Solutions Engineer, Grafana Labs **Session Abstract:** Learn how Grafana Assistant (available on OSS) combines OpenTelemetry signals with MongoDB MCP to move from observability to action. This session demonstrates AI-driven investigation of production issues, including trace analysis, query plan inspection, index recommendations, and automated remediation workflows. **📅 Date:** Thursday, June 11th, 2026 **🕡 Time:** 6:00pm - 9:00pm **📍 Location:** Smartworks Great Eastern Centre, 1 Pickering Street, Singapore 048659 - Level 8 ⚠️ **Reminder:** Please bring your valid physical photo ID (NRIC or Passport) to access the building. **Agenda** * **6:00 PM:** Registration, Light Bites & Networking * **6:55 PM:** Welcome & Opening * **7:00 PM:** Piti Champeethong, Senior Consulting Engineer at MongoDB – Real-Time Observability with MongoDB and Grafana: From Logs to Dashboard * **7:30 PM:** Hendri Tjiptowibowo, Senior Partner Solutions Engineer at Grafana Labs - Agentic Observability: From OTel Signals to Production Remediation with MongoDB MCP * **8:00PM:** Networking & Close **In Partnership with MongoDB:** This event is a collaborative session between **Grafana & Friends Singapore** and the **Singapore MongoDB User Group**. Special thanks to our Co-Partner, **MongoDB**, for providing the space.

Boxing is a combat sport that utilises punches, footwork, and head movement. Also known as “The Sweet Science”, it is best known for its efficiency of hitting without getting hit. Students will be taught the proper mechanics behind generating fast and powerful punches, as well as evading punches through evasive movements and footwork. Classes are taught in a controlled and conducive environment to ensure the safety of all members. ### **Address** 701A Yishun Ave 5, #02-01A, Singapore 761701 ### **Schedule** Thursdays 530PM - 630PM ### **Booking Information** * Please contact **98225900** to find out how to book this class. * The instructor will reach out to you once you've booked the class.

**For ages 21 and above.** ### **Address** 526a Geylang Rd, Atrium Residence, Singapore 389482 ### **Schedule** Thursdays 5PM - 6PM ### **Booking Information** * Please contact **98225900** to find out how to book this class. * The instructor will reach out to you once you've booked the class.

These all-inclusive classes comprise of bagwork, padwork, strength training, drills and light sparring, this is class is perfect for all levels. ### **Address** 100G Pasir Panjang Rd, #01-13, Singapore 118523 ### **Schedule** Thursdays 515PM - 630PM ### **Booking Information** * Please contact **98225900** to find out how to book this class. * The instructor will reach out to you once you've booked the class.

Welcome to **TRN2SMMT Basecamp**. This is a community for hikers, trekkers, mountaineers and outdoor enthusiasts looking to build real-world capability. Our sessions focus on mountain conditioning, strength, endurance, loaded movement, hiking fitness and preparation for the demands of the outdoors. Whether you are preparing for your first hike, a multi-day trek, a high-altitude expedition, or simply want to become stronger and more capable, you are welcome here. This is not a bodybuilding group. This is not a bootcamp. We believe fitness should have a purpose. The goal is not just to look fit, but to become capable, adaptable and prepared for challenges both on and off the mountain. What you can expect: •⁠ ⁠Mountain conditioning sessions •⁠ ⁠Strength and endurance training •⁠ ⁠Hiking and trekking preparation •⁠ ⁠Skills and knowledge sharing •⁠ ⁠Community events and outdoor challenges A S$8 logistics contribution applies for selected training sessions and events. Details will be provided in each event listing. Train for altitude. Build for life. Registration required limited slots: [Registration](https://www.eventbrite.com/e/1990761500237?aff=oddtdtcreator)

⚠️ **REGISTRATION IS REQUIRED VIA [THIS LUMA FORM](https://luma.com/s0txhgfy)**[ ](forms.gle/saLWmbr5XbwUX8Jp8)⚠️ SHELLGym is the regular cybersecurity workout you have been looking for! Whether you're just starting out and need some exercises, studying for a cert (hint: OSCP), looking at CTF challenges, or developing something cybersecurity-related (maybe your own automated tools?), SHELLGym aims to help you progress in picking up practical cybersecurity knowledge and skills. Come and go as you please, work on your own stuff with like-minded individuals, or just have fun during the workout! **AGENDA** Linux Forensics and Reverse Engineering basics: * Triaging in Linux * Step-by step IDA * Step-by-step gdb * Guided walkthrough on selected real-life binary **⚠️ NOTE** Bring your own laptops (and laptop chargers) with pre-installed Linux VM. Please also download IDA Free ([Link to Guide](https://hex-rays.com/ida-free)) before the session. **VIRTUAL SHELLGyms in JUNE** (by request) Hosted on Discord, do approach KK or the Div0 Crew for access **TRAINER** **KK Tan — Founder, counterShell** As a mid-careerist convert to cybersecurity, **Tan KK** picked up his practical skills through getting OSCP certified and by participating in a variety of CTFs. In his career at CSIT, he performed a variety of red-teaming and vulnerability research roles and established the Cyber Training School at CSIT as the Lead Instructor. Besides the OSCP certification, KK is also OSCE and OSEE certified, and has a Bachelor's degree in Social Science (Psychology). He now sees psychology as a field of study where you fuzz humans until they produce unexpected behaviour. **CO-ORGANISERS & VENUE SPONSOR** * [CyberSG TIG Collaboration Centre](https://www.linkedin.com/company/cybersg-tig-collaboration-centre) * [BLOCK71](https://block71.co/) **IMPORTANT NOTICES** * Code of Conduct: [https://www.div0.sg/code-of-conduct](https://www.div0.sg/code-of-conduct) * Terms of Use & Disclaimer Notice: [https://www.div0.sg/terms-of-use-disclaimer-notice](https://www.div0.sg/terms-of-use-disclaimer-notice)

Update 6/2: Event is full. Join us for the Lockpicking Introductory Course – a hands-on 3-hour session hosted by Locksport SG where curiosity meets skill. You’ll learn: How a pin tumbler lock actually works How to safely and ethically pick a lock using simple tools Practical techniques with guided, hands-on practice Personalized tips from experienced members of Singapore’s locksport community Bonus: Get introduced to decoding combination locks—an extra skill to level up your knowledge. Whether you’re a complete beginner or curious about physical security, this is your chance to try something unique, fun, and surprisingly satisfying. Sign up here: [https://tinyurl.com/locksportsg](https://tinyurl.com/locksportsg?fbclid=IwZXh0bgNhZW0CMTAAYnJpZBExaFRjSlM4WEhIS1BkQTJCZHNydGMGYXBwX2lkEDIyMjAzOTE3ODgyMDA4OTIAAR4bwq19RpRwgUZm0vt8ZR24KvA_u4RV9TRgIwN-sVM8Vf5PIzhBimYy9NezIQ_aem_EpysqS_rTSI5K_XSUSMBvQ) Included: Lockpicking set, cutaway training lock, cylinder lock will be given to participants to bring home for FREE. Locksport SG is a Singapore-based lockpicking hobby group that promotes the legal and safe way to understanding lockpicking. They have been featured on local media like Straits Times and Channel 8 news. [#Locksport](https://www.facebook.com/hashtag/locksport?__cft__%5B0%5D=AZbXHSKPl6KBpZUh1OrjiMBgXlRb3qcAps9xDdTVQeoJghpwgChFPBg6kfDdHXrD3sbT_27gTrv69e418h_Ia5EqtREqSLlROD74N55QYMt4oG-cFep-ZBc6KVbPyo02POjmWZC5egTOgBGzoSesca_zhJDv8vkiOmdhBFZSy0Wrs6RaXgy_ZAub9LPuqjaXe_4&__tn__=*NK-R) [#LearnSomethingNew](https://www.facebook.com/hashtag/learnsomethingnew?__cft__%5B0%5D=AZbXHSKPl6KBpZUh1OrjiMBgXlRb3qcAps9xDdTVQeoJghpwgChFPBg6kfDdHXrD3sbT_27gTrv69e418h_Ia5EqtREqSLlROD74N55QYMt4oG-cFep-ZBc6KVbPyo02POjmWZC5egTOgBGzoSesca_zhJDv8vkiOmdhBFZSy0Wrs6RaXgy_ZAub9LPuqjaXe_4&__tn__=*NK-R) [#lockpicking](https://www.facebook.com/hashtag/lockpicking?__cft__%5B0%5D=AZbXHSKPl6KBpZUh1OrjiMBgXlRb3qcAps9xDdTVQeoJghpwgChFPBg6kfDdHXrD3sbT_27gTrv69e418h_Ia5EqtREqSLlROD74N55QYMt4oG-cFep-ZBc6KVbPyo02POjmWZC5egTOgBGzoSesca_zhJDv8vkiOmdhBFZSy0Wrs6RaXgy_ZAub9LPuqjaXe_4&__tn__=*NK-R) [#hacking](https://www.facebook.com/hashtag/hacking?__cft__%5B0%5D=AZbXHSKPl6KBpZUh1OrjiMBgXlRb3qcAps9xDdTVQeoJghpwgChFPBg6kfDdHXrD3sbT_27gTrv69e418h_Ia5EqtREqSLlROD74N55QYMt4oG-cFep-ZBc6KVbPyo02POjmWZC5egTOgBGzoSesca_zhJDv8vkiOmdhBFZSy0Wrs6RaXgy_ZAub9LPuqjaXe_4&__tn__=*NK-R) #[#sɪɴɢᴀᴘᴏʀᴇᴇᴠᴇɴᴛs](https://www.facebook.com/hashtag/s%C9%AA%C9%B4%C9%A2%E1%B4%80%E1%B4%98%E1%B4%8F%CA%80%E1%B4%87%E1%B4%87%E1%B4%A0%E1%B4%87%C9%B4%E1%B4%9Bs?__cft__%5B0%5D=AZbXHSKPl6KBpZUh1OrjiMBgXlRb3qcAps9xDdTVQeoJghpwgChFPBg6kfDdHXrD3sbT_27gTrv69e418h_Ia5EqtREqSLlROD74N55QYMt4oG-cFep-ZBc6KVbPyo02POjmWZC5egTOgBGzoSesca_zhJDv8vkiOmdhBFZSy0Wrs6RaXgy_ZAub9LPuqjaXe_4&__tn__=*NK-R)

**About the Speaker** **Simon Ritter** With over a decade of experience as Deputy CTO at Azul Systems, our speaker has helped shape the adoption of Java and JVM technologies across the global developer community. A recognized expert in Java and open source, he is passionate about advancing developer productivity, application performance, and innovation throughout the software ecosystem. **Agenda** **Keeping Your Java Hot by Solving the JVM Startup and Warmup Problem** Java bytecodes and class files deliver on the original vision of “write once, run anywhere”. Using a Just-in-Time (JIT) compiler allows JVM-based applications to compile only the code that’s used frequently and optimise it precisely for how it's used. Using techniques like speculative optimisation can often deliver better performance than static, Ahead-of-Time (AOT) compiled code. However, this flexibility and performance come at a cost. Each time the JVM starts an application, it must perform the same analysis to identify hot spots in the code and compile them. This is referred to as the application warmup time. In this session, we’ll look at several approaches to alleviating or even eliminating this problem. Specifically: · Static compilation of Java code ahead-of-time (AOT). Specifically, the Graal native image approach · Generating a JIT compiler profile of a running, warmed-up application that can be reused when the same application is restarted, eliminating the need for much of the JIT compilation. This will include details of the work of the OpenJDK Project Leyden. · Decoupling the JIT compiler from the JVM for a Cloud environment. Providing a centralised JIT-as-a-Service allows caching of compiled code and offloading the compilation work when new code must be compiled. · Creating a checkpoint of a running application. This includes all application state (heap, stack, etc.) in addition to the JIT-compiled code. Project CRaC will be used as an example. At the end of the session, you’ll be all set to keep your Java hot! **Modern Java Puzzlers** Since JDK 9, Java, as a language, has evolved faster than at any point in its 30-year history. For developers, this is great, as it means we get more new features that make our code more concise and, hopefully, easier to read and understand. All new language features also bring their quirks and possibly unseen consequences. In this fun interactive session, we’ll examine a range of recent language features and pose questions to the audience about how the code works and what it does. We’ll cover many of the new language features from recent releases, including switch expressions, sealed classes and pattern matching. We’ll even look at some curious ways special characters can be used in unexpected ways. The answers will most definitely not always be as you expect!

**For ages 10 and above.** Get fit (strength and conditioning) while learning the valuable skills of self defense. The training will be fun but intense and the methods are designed to prepare you for practical street encounters, and to help you get out of threatening situations quickly with little or minimal injury should the need arise. The areas that these classes will cover will span into the following parts. They are: 1. Striking techniques 2. Basic grappling and ground defense 3. Escapes techniques (e.g. body, hand grabs, head locks, and chokes) 4. Joint locking and restraining techniques. 5. Pad work drills. There will be light sparring and simulations drills. Risks, situational awareness and self defense fundamentals are also designed in the syllabus and will be covered accordingly. ### **Address** 767 Upper Serangoon Rd, #01-05 Spazio @ Kovan, Singapore 534635 ### **Schedule** Saturdays 930AM - 1030AM ### **Booking Information** * Please contact **98225900** to find out how to book this class. * The instructor will reach out to you once you've booked the class.

**For ages 13 and above.** In this class, you will build on the basics from Foil Foundational Class and continue to learn more advanced technical skills and their applications, such as: * Different parries * Compound attacks * Counter riposte * Counter attack ### **Address** 231 Mountbatten Rd, BLK F, #01-01, Singapore 397999 ### **Schedule** Fridays 730PM - 930PM ### **Booking Information** * Please contact **98225900** to find out how to book this class. * The instructor will reach out to you once you've booked the class.

**TBA**

Over a billion documents processed. Millions of Veterans impacted. Hundreds of thousands of employee hours saved. Faster decisions. Greater accuracy. More benefits in the hands of our disabled Veterans. We created Smart Search, the world’s largest consumer of Amazon Textract, right when GenAI began reshaping what’s possible. Since then, we’ve built a suite of AI‑driven solutions that transform this data into real, measurable outcomes—accelerating benefits decisions for our Nation’s Veterans. Join us for a focused conversation on how an outcome‑driven approach to AI is helping us boost accuracy, streamline workflows, and deliver faster results for those who have served. This is a follow up to the AWS re:Invent 2023 "Intelligent Document Processing with Gen AI for Public Sector" presentation. About Speaker: Cameron Williams is a Senior Technical Project Manager and cross-functional technical leader at Booz Allen Hamilton with 15+ years of experience architecting and evolving scalable, cloud-native systems, from greenfield development to complex enterprise modernization. https://www.linkedin.com/in/cameronw711/ **THANK YOU** *Franklin University* for hosting our meetup! To learn more about *Franklin University*, please visit their website: https://www.franklin.edu/ **DIRECTIONS** Franklin University Fisher Hall 300 E. Main St, Columbus, OH 43215 Map: https://maps.app.goo.gl/jxjBA2hUmS5qrvhq8 Parking is FREE! Please park in Lot C in front of Fisher Hall. See attached map. NOTE: Map the address only. When mapping with Google Maps it may use the Fisher Hall at OSU, which is NOT correct. **Want to sponsor the pizza and/or bar tab?** Please contact me if you would like to sponsor this meetup's pizza and/or bar tab: angelo@mandato.com

Columbus Code & Coffee is an inclusive, informal co-working session. People of all skill levels attend, and we love it that way. Many people (optionally) bring projects to work on, and many other people (optionally) socialize the entire time. It's entirely up to you! **What to Expect at the Intro Circle** \~\~\~\~\~\~\~\~\~\~\~\~\~ Near the beginning of the event (1:30 pm), we do a standup: * Organizer announcements, updates, and logistics Round 1 - (7 secs max): * Your name * What you're working on * What you can help others with Round 2: * Community events you wanna plug. If none, that's cool too. Round 3: * Job opportunities you're hiring for OR announce that you are looking for one. If none, that's cool. After the introduction circle, everything is self-organized! Feel free to work alone, pair up, attend one of our workshops/presentations, or mingle!

**PLEASE READ THE FOLLOWING IMPORTANT NOTES:** 1. The dates for this series are simply placeholders at the moment. We are working on our 2026 schedule, and adjustments are forthcoming. 2. Each class in this series has an attendance fee. 3. Each class, from BOTH a sign-up and fee perspective, is a separate entity. 4. As the Etch toolset evolves, so too will the class outline below. **Introduction:** Our Site Building with Etch class provides detailed instructions on the philosophy of the Etch development framework, as well as in-depth, hands-on instruction on using the Etch environment and associated tools. Anyone familiar with Kevin Geary and the Digital Gravy set of products will tell you that they offer ground-breaking approaches to professional WordPress site development. As we write this, the Etch toolset and environment are rapidly taking shape, with weekly quantum leaps forward in WordPress development methodologies. As early investors in the Etch product offering and its development process, we are actively testing and evaluating the toolset as it takes shape. We are beyond excited to see how WordPress site development is being modernized, and can't wait to bring this course set to you. It will be a paradigm shift in page and site development within WordPress, as well as moving your development mindset light-years forward. Join us as we explore Etch and dive deep into development approaches that will genuinely elevate your craft as a website developer and agency provider. Scalable, responsive, compliant websites are now within easy reach, and Etch provides both the platform and toolset to take you there. **The breakdown of the 10-class series is as follows:** * Class 01 - TBD * Class 02 - TBD * Class 03 - TBD * Class 04 - TBD * Class 05 - TBD * Class 06 - TBD * Class 07 - TBD * Class 08 - TBD * Class 09 - TBD * Class 10 - TBD Throughout the class sessions listed above, we cover the following key areas of web development with Etch: * **Introduction to Etch Interface:** * Familiarization with the toolset's layout and understanding how to navigate and interact with its various components. * **Visual Site Building:** * Techniques for creating layouts using Etch's interface, incorporating sections, divs, containers, and elements to build semantically correct page structures. * **Styling and Design:** * Utilizing Etch's styling approach to customize elements, apply global CSS classes for consistent design, and leverage features like Flexbox and CSS Grid for responsive layouts. * **Dynamic Content and Custom Fields:** * Integrating dynamic content from custom post types and custom field plugins (like ACF, Meta Box, and even built-in fields) to build data-driven websites. * **Component Building:** * Creating and managing reusable components for headers, footers, post type layouts, and other site-wide elements. * **Performance Optimization:** * Understanding how Etch contributes to fast-loading websites and implementing performance best practices. * **Advanced Features:** * Depending on the class level, it might delve into advanced topics such as conditional logic, interactions, and custom code integration to enable more complex functionality. The series aims to equip participants with the skills to efficiently build, customize, and maintain WordPress websites using Etch, catering to both beginners and experienced web developers alike.

http://photos2.meetupstatic.com/photos/event/2/a/9/6/600_348310902.jpeg Instructor - Crow, HPS Class fee is $30 at the door or approved exchange RSVP with Advance pay of $25 (discounted) by PayPal on the web or by contacting Enchanted Elements (614) 437-2642. Reservations made directly to Enchanted Elements will be added to the class list manually not online. Private Instruction ~ Closed to the Public ~ Initiated Members Only Please come prepared for ritual. Blessings ~ Crow

Please see below for this event's description. **Visit our [Eventbrite page](https://www.eventbrite.ca/e/owasp-toronto-june-2026-tickets-1991326120030?aff=oddtdtcreator) to RSVP!** **Hybrid event:** * In-person: Security Compass, 325 Front Street West, Unit 103, Toronto, ON M5V 2Y1 * Livestream: https://www.youtube.com/watch?v=H5aZ_CwYEus Doors open at 6:00 PM. Presentation/livestream starts at 6:30 PM **Description:** AI split AppSec into two attack surfaces: your code, and the code factory that produces it—coding agents, the models and MCP tools they call, the developer environment itself. With exploits now landing in under ten hours and vulnerabilities shipping from more authors than ever, this talk lays out a staged path to a "Mythos-ready" program—reprioritizing around reachable risk, accelerating remediation, and securing the AI-SDLC—and argues security should stop filing tickets and start shipping fixes.

**Important time note:** Please plan on arriving between 5:30 and 6:00 as the elevators lock after 6 and you'll need to message us and we'll need to come get you. The building address is 4450 Bridge Park The entrance is 6620 Mooney St, Suite 400 You will need to scan your ID at the door to get a visitor badge. **Abstract** *Customize the IDE: Building Extensions for Visual Studio Code* Visual Studio Code is one of the most widely used development environments today, and much of its flexibility comes from its extension ecosystem. Extensions allow developers to customize the editor with new features, integrations, and workflow improvements tailored to their needs. In this session, we’ll cover what extensions are and the different types available, including full extensions written in TypeScript or JavaScript, along with lighter-weight extensions such as color themes, language packs, language support, code snippets, and keymaps. We’ll also look at practical reasons a developer might create an extension, from automating repetitive tasks to adding custom tooling. The session includes a hands-on walkthrough of creating a new extension, testing it locally, and understanding the basic project structure. We’ll close with a brief overview of how extensions are packaged and published to the Visual Studio Marketplace and other distribution options. **YouTube Link** TBD