Software Security

For decades, application security has been built around a simple assumption: humans are the primary producers of software. We train developers, review their pull requests, model threats in design meetings, and build controls around human decision-making. That assumption is rapidly breaking down. As AI coding assistants evolve into autonomous software agents, organizations will gain access to an effectively unlimited engineering workforce capable of producing software at a speed no human team can match. The pressure to adopt these systems will be driven not by curiosity, but by competition. Companies that successfully harness agentic development will ship faster, iterate faster, and potentially outpace those that do not. This shift forces a fundamental rethinking of application security. The future of AppSec is not securing developers—it is governing an agentic workforce. Threat modeling, code review, security testing, and change management will not disappear, but they will need to operate at machine speed and increasingly be performed by systems rather than people. In this talk, Ken Johnson, CTO of DryRun Security, explores what the next decade of application security may look like, the assumptions that will no longer hold, and why security professionals must understand these systems deeply if they hope to influence the future rather than react to it.

The next NoVABeerSec event - "Informal Gathering of Security Minds Over Beer'' will be Tuesday, June 23rd, 5:30PM til 7ish at Starr Hill Tysons Biergarten (1805 Capital One Dr S Suite 1100, Tysons, VA 22102). **Venue for June:** Starr Hill Brewery / Biergarten (Outdoor) **\*\*\* The Biergarten is primarily an outdoor venue, if the weather isn't cooperating we'll shift into Brewpub located on the ground level next to Capital One Hall \*\*\*** In the early 1990s, Charlottesville native, Mark Thompson took his biology degree from James Madison University and moved to Portland, Oregon, ground zero for craft beer’s growth in America. The natural blend of art and science poured into the brewing scene inspired him to take up the craft. Working alongside brewers in Oregon and Colorado, Mark honed his own artisan beer recipes. An old friend looking to start a brewpub and music hall back in Charlottesville eventually lured Mark back to Virginia. In September 1999, they partnered to found Starr Hill Brewery out of a passion for great beer and live music. Named after the local neighborhood, the brewery shared its original space with the Starr Hill Music Hall. The historic storefront on Main Street was once home to the state of Virginia’s first craft brewing operation, Blue Ridge Brewing Company. **Additional Info:** We are an inclusive group, so if we missed anyone please let us know or if you want to bring your significant other/spouse please do. Have a great week and see you next month! Cheers, Rinaldi Rampen & Mike McCabe of @NoVABeerSec

Important: Register on [AICamp website](https://www.aicamp.ai/event/eventdetails/W2026061814) is required for admission. **Description:** Welcome to the AI meetup in Washington DC. Join us for deep dive tech talks on AI, GenAI, LLMs and Agents, hands-on experiences on code labs, workshops, and networking with speakers and fellow developers. **Agenda:** \* 5:30pm\~6:00pm: Checkin, Food/drink and networking \* 6:00pm\~8:00pm: Tech talks and Q&A \* 8:00pm: Happy Hour at Courthouse Social (cross the street) **Tech Talk: Secure Developer Environments in the Age of AI Agents** **Speaker:** Patrick Brown (Coder) **Abstract:** Federal engineering teams are under pressure to ship faster while meeting some of the most demanding security and compliance requirements in the world. In this talk, Patrick Brown of Coder explores how cloud development environments (CDEs) give agencies a foundation to accelerate software delivery without sacrificing control — and why that foundation matters even more as AI-powered coding agents enter the workflow. He'll cover how CDEs keep source code off endpoints, enforce zero-trust access patterns, and provide the consistent, ephemeral infrastructure that both human developers and AI agents need to operate safely at scale. **Speakers:** Stay tuned as we are updating speakers and schedules. If you have a keen interest in speaking to our community, we invite you to submit topics for consideration: [Submit Topics](https://forms.gle/JkMt91CZRtoJBSFUA) **Sponsors:** We are actively seeking sponsors to support AI developers community. Whether it is by offering venue spaces, providing food, or cash sponsorship. Sponsors will not only speak at the meetups, receive prominent recognition, but also gain exposure to our extensive membership base of 5,000+ AI developers in D.C and 500K+ worldwide.

Come join us at Nova Labs for our monthly lockpicking meeting! We meet every third Wednesday at the Nova Labs Fairfax location at 3850 Jermantown Road. Learn about locks, lockpicking, lock modifications, and even lock smithing in our classroom environment. No tools, skills, or knowledge required, but feel free to bring any of those things with you! Our meetings are overseen by one or more locksmiths.

Please RSVP on luma: [http://luma.com/dc2-nwz3](http://luma.com/dc2-nwz3) A meetup for software engineers and IT professionals who use AI tools in their craft. ​**agentic engineering** describes the practice of developing software with the assistance of coding agents. What are **coding agents**? They're agents that can write and execute code. Popular examples include [Claude Code](https://code.claude.com/?utm_source=luma), [OpenAI Codex](https://openai.com/codex/?utm_source=luma), [Gemini CLI](https://geminicli.com/?utm_source=luma), and [https://kilo.ai/](https://kilo.ai/?utm_source=luma) If you build software and want to learn and share effective practices for using agents to build real software, this is the meetup for you. Agenda: 6-6:30pm: Food and networking 6:30pm - Introductions 6:45pm - Agentic Engineering Demo /Tips 7:00pm - Agentic Software Engineering Failures 7:15pm - Presentation and interactive survey on Agentic Engineering 8:00pm - end

**Agenda:** • 5:00 PM - Doors Open (in-person attendees). • 5:30 PM - **Deep Dive into Claude Code** • 6:30 PM - Networking • 7:00 PM - Doors Close **Talk Overview:** **Deep Dive into Claude Code** Ever wondered what happens under the hood when Claude Code runs your next Android task? This talk dives into the internals of Anthropic's AI coding agent — its bootstrap pipeline and agent loop. You'll see how fork agents share prompt-cache prefixes to cut input token costs and how four-layer context compression keeps long conversations from exhausting the window. You'll leave with a mental model of how this production AI agent actually works. Whether you're building custom MCP integrations, orchestrating multi-agent tasks, or just trying to get more from the tool you use every day, you'll have a toolkit of patterns to apply to your own Android workflows. **Speaker**: Mohit Sarveiya **Speaker Bio:** Staff Android Engineer AirBnb & Google Developer Expert **How to find us:** 1680 Capital One Drive, McLean, VA 22102 We'll be located in C2 **100 D/E**. The area is publicly accessible. If you can't find it, you can ask the front desk for directions to the **C2 100 D/E** **Attending Virtually?** Zoom Link: [https://us06web.zoom.us/j/84509924569?pwd=jLXAAyOY94b9BARoiACKtKz16MoDi1.1](https://www.google.com/url?q=https://urldefense.com/v3/__https://us06web.zoom.us/j/84509924569?pwd%3DjLXAAyOY94b9BARoiACKtKz16MoDi1.1__;!!FrPt2g6CO4Wadw!LFvXbAXwA9nr_LdcnaIwoMGePe66Msg5rsnSUkUB9Z2ixCtXMfmUuOCTC5hZPsJVUdvuRVQrAUvdV-jdXQm6$&sa=D&source=calendar&usd=2&usg=AOvVaw16hb6F9SrCsaIabEet1HR7) Meeting ID: 845 0992 4569 Passcode: 754789 **Parking**: You can park at 1680 Capital One Drive; this garage has a sign indicating public parking. Or at the WEGMANS parking lot.

Non-programmers are absolutely welcome—you don’t need to know how to code to join. This meetup is for anyone interested in tech. You can share what you’re working on, propose ideas, or just talk about technology. No intro circle 🙂 We typically meet bi-weekly at the Centreville Regional Library. If you have any questions, comments, or concerns, feel free to reach out: timothyfilippone@gmail.com