RVAsec Deep Dive - May

You must be registered to attend this event.

This month's Deep Dive is the last one before the conference, and we're going out with a double feature.

Two talks. Two angles.

First up: Sofia Duarte brings us "XXE: Dead or Alive?" A grounded look at XML parsers and XXE vulnerabilities still being found and exploited today. Before you can chase modern attack surfaces, you need a solid foundation in what you're actually hunting. Sofia breaks down what XXE looks like in real code, how it behaves in the wild, whether it's here to stay, and what's being done about it.

Then: Nick Berrie (@machevalia), who leads Service Delivery at Sprocket Security, talks through his own experience embracing AI in penetration testing and security research. Real workflows, actual findings, lessons learned the hard way, and where he sees it all heading.

As always, we’ll leave time for questions and open discussion. Come learn something, meet some people, and hang out with RVAsec!

Location
• Ours (2309 W Main St)

Agenda
• 6:00 PM – Doors open, socializing & refreshments
• 6:15 PM – Sofia Duarte: XXE: Dead or Alive?
• 7:15 PM – Break
• 7:30 PM – Nick Berrie: Hacking in the Age of AI
• 8:30 PM – Wrap up and open conversation

Capacity:
We expect roughly 30 seats. If you sign up, please show up; if something comes up, no problem, but cancel or update ASAP so someone else can take the spot.