Agile and Scrum

VIRTUAL PRESENTER. NOTE SPECIAL DATE: 2ND TUESDAY IN THE MONTH .NET 10 is here alongside a practically rewritten Visual Studio 2026. Learn about the new C# 14 features, VS2026 niceties, and more!

Join us to drum for rain! The drum circle will be at the Guru Rinpoche statue at the entrance to the Peace Park, across the street from the temple. We will be chanting sacred mantras as we drum, praying for abundant rain to ease the drought. All are welcome! Please bring any percussion instruments you have - the more the merrier! If you don't have any drums, there are typically extra available. Either way, you can chant along with everyone. In the event of inclement weather, we usually drum as long as we can before the storm starts, or wait it out and start a little late. We hold out until the last minute to cancel so if the weather seems iffy, keep an eye on our Facebook page for announcements. The DC region is currently experiencing moderate to severe drought. Many other regions of the world are also experiencing drought conditions. We will dedicate our prayers to bringing life-giving rain to all who need it!

For decades, application security has been built around a simple assumption: humans are the primary producers of software. We train developers, review their pull requests, model threats in design meetings, and build controls around human decision-making. That assumption is rapidly breaking down. As AI coding assistants evolve into autonomous software agents, organizations will gain access to an effectively unlimited engineering workforce capable of producing software at a speed no human team can match. The pressure to adopt these systems will be driven not by curiosity, but by competition. Companies that successfully harness agentic development will ship faster, iterate faster, and potentially outpace those that do not. This shift forces a fundamental rethinking of application security. The future of AppSec is not securing developers—it is governing an agentic workforce. Threat modeling, code review, security testing, and change management will not disappear, but they will need to operate at machine speed and increasingly be performed by systems rather than people. In this talk, Ken Johnson, CTO of DryRun Security, explores what the next decade of application security may look like, the assumptions that will no longer hold, and why security professionals must understand these systems deeply if they hope to influence the future rather than react to it.

Free drum jam in a beautiful park, welcoming community. We start at 6:30 and jam until 9:30 at latest, the park closes at 10:00. Please bring a chair or stool to sit on. It's a short walk across the bridge from the parking lot and the whole area is well lit after dark. Park near the large, white restroom building. We always have first timers as well as regulars and we all have fun drumming together. Bring your drum if you have one. I have a few extra drums and percussion instruments in case you don't have one yet. Looking forward to seeing you there! Mark P.S. Out of town friends, hope you can make it down when you're in the area!

**Join Nova Scribes for an in person Scribe Circle** to practice graphic recording together and build the kind of community that makes solo work feel a little less solo. We'll spend the heart of our time graphic recording a former Nova Scribes talk on visual practice as well as spend some time reflecting on our work and sharing real time feedback. **Who is this for?** Graphic recorders, visual practitioners, sketchnoters and anyone who listens, thinks, and draws at the same time. Whether you've been doing this for years or you're still finding your style, you're welcome here. **No prior experience with the group required.** Bring your paper and markers - a few foam boards will be available. The fee covers the price of the venue.

**Inflow 6:00 PM - Talks Start \~6:30 PM** **Reston Community Center - 2310 Colts Neck Rd, Reston, VA 20191** NoVA Hackers is a group located in the Northern Virginia area and is made up of Information Security Professionals from all walks of life, from government and private sector, to students and beginners. The monthly meetings are held much like a mini-conference with 4-8 speakers and only a few basic but strict rules. Participation and Permission Active Participation is required for continued membership and is the only due required. Permission is required to be obtained from anyone providing information to the group from the person providing it to be made public by anyone other than the provider. Historically our talks generally run a bit late and we have a hard stop at 9:30pm for the room. If you want to socialize we recommend you arrive at 6 to meet and greet before the talks. Agendas and remote meeting option available after you join the group.