Software Security

**Hey fellow AWS enthusiasts! ✨** This evening we'll takle our AWS costs! 💪🏻💸 We are happy to have **[Meisi Zhan](https://www.linkedin.com/in/meisi-z-52702b61/),** a Customer Facing Cloud Engineer @ codecentric, joining to walk us through **FinOps in Action with AWS Spot Instances**. Thanks to our friends at **[codecentric Nürnberg](https://www.codecentric.de/standorte/nuernberg)** for sponsoring the event with food and drinks and opening their wonderful offices for us! **📆 Tonight's Agenda** 19:00 - Welcoming **19:15 - Talk by Meisi followed by Q&A and knowledge sharing** 20:00 - Food, Drinks & Networking Looking forward to seeing you 👋🏻 **[Nora](https://www.linkedin.com/in/nora-schoener/)** & **[Frank](https://www.linkedin.com/in/frankprechtel/)** \-\-\- The talk ⤵️ **FinOps in Action: Real-World Cost Optimization using AWS Spot Instance** The talk is about our AWS funded PoC project, this project demonstrates the implementation of FinOps principles by leveraging AWS Spot Instances to achieve significant infrastructure savings without compromising workload performance. It provides a technical blueprint for orchestrating Spot Fleets and Auto Scaling groups, offering a practical approach to data-driven cloud financial management. The speaker⤵️ **Meisi Zhan** is a distinguished Customer-facing Cloud Consultant and Evangelist at codecentric, bringing over eight years of expertise in IT consulting and software engineering. As a highly experienced Pre-Sales Engineer and Solution Architect, she has a proven track record of building trusted advisor relationships and driving customer success across multi-cloud environments, including AWS, Azure, and GCP. Meisi excels at translating complex technical challenges into quantifiable, TCO-justified business value and viable technical architectures. Her approach focuses on Transformation Consulting, DevOps, and FinOps, ensuring that cloud-native solutions are both innovative and financially optimized. Get in Contact with Meis through [LinkedIn](https://www.linkedin.com/in/meisi-z-52702b61/). \-\-\- **Please note:** At the event, photos and videos will be taken for marketing purposes both by our hosts and our location sponsors. We try to offer a hybrid experience by providing a video stream of the talk. There will be no recording published after the event. Please also keep in mind, that we try our best effort to provide a good streaming experience. We don't offer a professional stream, so delays, technical issues or other interference are a matter to be tolerated.

Treća **LEGO® SERIOUS PLAY® Foundation Facilitation Certifikacija** – međunarodno priznati program za sve koji žele koristiti LSP metodu profesionalno i sigurno. **LEGO® SERIOUS PLAY® (LSP)** je strukturirana facilitacijska metoda koja koristi LEGO kockice kao alat za razmišljanje, komunikaciju i rješavanje kompleksnih izazova. Sudionici grade modele, koriste metaforu i kroz priču dolaze do **bržih uvida, jasnijeg razumijevanja i 100% sudjelovanja svih u grupi**. Ova certifikacija temelji se na iskustvu **2.000+ provedenih radionica**, razvijena je uz **prof. Johana S. Roosa**, su-izumitelja metode, i u potpunosti poštuje originalne LEGO® SERIOUS PLAY® principe. **Kome je namijenjeno?** Ovaj trening je idealan za: * facilitatore * HR stručnjake * voditelje i voditelje timova * coacheve i konzultante * pedagoge i edukatore * psihologe * sve koji rade s grupama i žele nove alate za poticanje sudjelovanja, uvida i suradnje. **Što ćete dobiti?** * Službenu **Foundation Facilitation** LSP certifikaciju, * vještine za vođenje vlastitih LEGO® SERIOUS PLAY® radionica, * praktično iskustvo kroz intenzivan trening, * jasnu strukturu i sigurnost u korištenju metode, * pristup globalnoj LSP zajednici. **Zašto sudjelovati?** U svijetu gdje su timovi sve manje angažirani, a izazovi sve složeniji, LSP omogućuje: * 100% uključivanje svih sudionika * brže i kvalitetnije donošenje odluka * vidljiv napredak u komunikaciji i razumijevanju * rješavanje problema na inovativan, siguran i efikasan način **Prijave i informacije** Cijena: 1590€ Ostalo je još 2 **slobodna mjesto**. ✉️ **jbn@astyre.hr** 📩 Ili pošaljite poruku organizatoru preko Meetupa.

Bok svima! 👋 Kako ljeto stiže u Zagreb i grad poprima onaj svoj poseban, ležerni ritam, vrijeme je da pokrenemo našu priču. Dobrodošli na prvi susret zajednice **Krećem ispočetka** – opušteno druženje stvoreno za sve nas u tridesetima koji želimo izgraditi novi krug kvalitetnih ljudi, bez glume i bez pritiska. Bilo da si nakon duge veze ponovno solo, da su se tvoji stari prijatelji razišli, da si tek doselio/la u Zagreb ili jednostavno želiš osvježiti svoj život novim licima – dobrodošao/la si. **📍 Kada i gdje?** 📍 **Luft** (Savska cesta 32), Zagreb 🕗 **Ponedjeljak, 08. lipnja od 19:00h** ✨ **Otvoreno za sve**: za svakoga tko ima 30+ godina i želi krenuti ispočetka. ### **💬 Što se događa na našem Meetupu?** Očekuj opuštenu, toplu atmosferu u kojoj se nitko ne mora dokazivati. * **Spontani razgovori:** Pričamo o knjigama, hobijima, filmovima, planovima i svemu onome što nas stvarno veseli. * **Iskreni smijeh:** Trenuci u kojima shvatiš da tvoje havarije i tvoji novi počeci nisu samo tvoji – svi smo ovdje u sličnom filmu. * **Nove veze:** Autentični razgovori iz kojih se, sasvim spontano, rađaju nova, dugotrajna prijateljstva. Bez formalne strukture, bez forsiranja – samo ljudi koji upoznaju ljude. ### **💡 Jedino pravilo kojeg se trebaš pridržavati?** Spremiti mobitel u džep ili torbu i uživati u povezivanju s drugima 💖

Join us for **BipTalks Engineering Meetup**, where we’ll explore how AI technologies perform once they leave the sandbox and enter real-world systems, through two first-hand talks. From the MCP protocol that can turn your existing API into an agentic service, to using LLMs effectively to build tools that solve problems reliably and efficiently — both talks offer concrete, actionable knowledge drawn from production experience. 💡 **What to expect:** * **Real-world insights from production** — Both talks are grounded in hands-on experience. No theory for theory's sake — only what actually worked (and what didn't). * **Concrete tools you can use right away** — Learn how to turn an existing API into an MCP server and how to use LLMs to build solutions that work every time. * **A clearer view of software development with fast-evolving protocols** — Understand how to make architectural decisions in an environment where standards and tools shift week to week. 🎤 **Speaker: Filip Pankretić, Junior Software Engineer @ Infobip** Filip is a Junior Software Engineer at Infobip with a deep passion for machine learning. He works with voice models — teaching them how to listen, and sometimes how to respond. He helped open Infobip's platform to AI agents worldwide using MCPs, giving them communication superpowers. 🎤 **Speaker: Filip Srnec, Principal Engineer @ Infobip** Mathematician, engineer, father, and husband. At Infobip, Filip currently leads the MCP initiative with the goal of opening the communications platform to the agentic world. He has worked on challenging projects across diverse areas — from scientific computing to scalable distributed systems and API governance. He has spoken at conferences including Devoxx UK and Infobip Shift, and teaches at the Department of Mathematics at the Faculty of Science as an external associate. After the official part of the program, stay with us for **great conversations and refreshments** 🍕🥤 🎟️The event is **free**, but the spots are limited so please register here: [Bip Talks Zagreb - Infobip](https://www.infobip.com/hr/c/biptalks-engineering-meetup-zagreb)

Meetup #2 for **Vibe Coders Croatia** — this time we're joining forces with **[UXR Zagreb](https://www.meetup.com/ux-research-zg/)**. Two communities that usually sit on opposite ends of the product — the people who *talk to users* and the people who *ship to them* — in one room for a night. The bet: vibe coders move fast and build, UX researchers know *what's actually worth building and why*. Put them together and you get a sharper loop — research that ships, and shipping that's grounded in real user evidence. Two talks, both in Croatian, one from each side of that table, then the hallway conversations where the next side project (and your next user interview) starts. \-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\- 📣 **From Insights to Infrastructure: Expanding UXR Impact with AI** AI changes how everything in software development works — including research. This talk walks through applications of AI across the research process, from organizing recruitment and analysis to bridging insight and delivery, and makes the case that researchers now have the opportunity to shift from *delivering insights* to *owning research infrastructure*. **Filip Užarević**, User Researcher * [LinkedIn](https://www.linkedin.com/in/filip-uzarevic-b4b87584/) \-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\- 📣 **Is Documentation Dead or More Alive Than Ever?** AI generates docs in seconds, but the code those docs describe changes just as fast, which makes stale documentation a *bigger* problem, not a smaller one. This talk explores why the AI era demands a different approach to documentation, and looks at Tesso, a tool that connects documentation to the actual code written by AI and humans alike — so the docs and the codebase stop drifting apart. **Danijel Buhin**, Software Engineer * [LinkedIn](https://linkedin.com/in/danijelbuhin) \-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\- 🗣️ Both talks will be held in Croatian. 📹 Not recorded or streamed this time — you have to be in the room. 🪑 There are a limited number of seats, first come, first served. 📍**Location**: **Zadarska ulica 80, 6th floor — Reactor Studio.** Use the main entrance on the right side of the building. If you're driving, the Lidl parking lot nearby is your best bet, or grab any free spot around the buildings.

**Register here: [https://events.3nf.hr/Seminar.aspx?eid=adc0dd14-ea08-4c03-8eff-bb55d7bc4fd0](https://events.3nf.hr/Seminar.aspx?eid=adc0dd14-ea08-4c03-8eff-bb55d7bc4fd0)** This one-day seminar is intended for data and analytics professionals who want to understand how to design, implement, and use Microsoft Fabric effectively. It provides a practical, end-to-end overview of Fabric’s key components, including OneLake, data ingestion and transformation options, lakehouse and warehouse choices, and the evolving role of Power BI within Fabric. Participants will also gain insight into AI capabilities, security, CI/CD, and licensing, and will apply their knowledge through hands-on labs to build a complete analytics solution.

Speaker: **Luka Karlić** Title: **My first anniversary with Claude Code - am I still in the honeymoon phase?** In this talk, Luka will take us through his first year of (power)using Claude Code - what worked, what didn’t. How does he keep learning instead of just producing? What about critical thinking? Expect a fair amount of rambling about harness, scaffolding, memory, even brain-atrophy. Last but not least - why, to him, this is both the easiest and the hardest time to be an engineer. \-\-\-\-\-\-\-\- Drinks and friendly discussion afterwards at [Buzz Bar](https://maps.app.goo.gl/e8dCmPL5ZBhzua717) 🍻🍷🥤☕️

**Register here: [https://events.3nf.hr/Seminar.aspx?eid=4528740f-822b-4106-8d5a-aa47ee84df9d](https://events.3nf.hr/Seminar.aspx?eid=4528740f-822b-4106-8d5a-aa47ee84df9d)** This one-day seminar is intended for SQL Server professionals who regularly inherit, maintain, or optimize complex and poorly written T-SQL code. It focuses on advanced query analysis and refactoring techniques, covering topics such as MERGE misuse, JOIN pitfalls, paging logic, window functions, indexed views, CTEs, user-defined functions, and dynamic SQL. Through fast-paced demos and real-world examples, participants will learn how to diagnose performance issues, understand execution plans, and rewrite slow or overly complex queries into efficient, readable, and maintainable T-SQL.

Agenda, registrations and more info: [https://datasaturdays.com/Event/20260613-datasaturday0075](https://datasaturdays.com/Event/20260613-datasaturday0075) Data Saturday Croatia 2026 is a one-day event for professionals who use the Microsoft data platform, including SQL Server, Azure SQL, Microsoft Fabric, and Power BI. This community event offers content across data management, cloud and hybrid architecture, analytics, business intelligence, and more.

**Register here: [https://events.3nf.hr/Seminar.aspx?eid=8fd382fd-ecca-4b34-afa2-f3ffe7de3bff](https://events.3nf.hr/Seminar.aspx?eid=8fd382fd-ecca-4b34-afa2-f3ffe7de3bff)** This one-day seminar is intended for professionals working with SQL Server or Azure SQL Database who want to perform advanced analytics without learning a new programming language such as Python or R. Participants will learn how to use Transact-SQL for data preparation, as well as for statistical and data science analyses.

For decades, application security has been built around a simple assumption: humans are the primary producers of software. We train developers, review their pull requests, model threats in design meetings, and build controls around human decision-making. That assumption is rapidly breaking down. As AI coding assistants evolve into autonomous software agents, organizations will gain access to an effectively unlimited engineering workforce capable of producing software at a speed no human team can match. The pressure to adopt these systems will be driven not by curiosity, but by competition. Companies that successfully harness agentic development will ship faster, iterate faster, and potentially outpace those that do not. This shift forces a fundamental rethinking of application security. The future of AppSec is not securing developers—it is governing an agentic workforce. Threat modeling, code review, security testing, and change management will not disappear, but they will need to operate at machine speed and increasingly be performed by systems rather than people. In this talk, Ken Johnson, CTO of DryRun Security, explores what the next decade of application security may look like, the assumptions that will no longer hold, and why security professionals must understand these systems deeply if they hope to influence the future rather than react to it.

While you spend your career relentlessly hardening technical systems, are you overlooking the most critical operating layer? Technical expertise is only half the battle. Join us on **Tuesday, June 9, 2026,** at **Honor Brewing Company** at **42604 Trade West Dr, Sterling, VA 20166** to unlock the human side of security! Want a custom name tag to enhance your networking opportunities? Register here and yours will be ready at the door: https://share.hsforms.com/1lIgM4Vu3Q0KlJsKTmyXnigdwxz1 We are thrilled to welcome **Stacey Champagne**, Founder & CEO of **Women's Cybersecurity Alliance**, to share how EQ can transform how you lead under pressure! Stacey, is a leading insider risk management expert who has built security programs for **Fortune 500** companies,high growth startups, private equity, and federal agencies. Her experience spans advanced cybersecurity degrees (**CISSP, GSOM, GSLC**) and **federal intelligence experience**, including creating briefings for the major stakeholders from **military leaders** to the **President** of the United States. Firewalls and patches cannot manage panic during a breach. Human leadership can. Mark your calendars to join us for this exclusive session next month! **Agenda** 5:30 Social hour and networking begins 6:10 Welcome 6:15 Patch Your Leadership Stack - Stacey Champagne 6:50 Q&A 7:00 Open Mic & Networking Continues 7:30 Adjourn

The next NoVABeerSec event - "Informal Gathering of Security Minds Over Beer'' will be Tuesday, June 23rd, 5:30PM til 7ish at Starr Hill Tysons Biergarten (1805 Capital One Dr S Suite 1100, Tysons, VA 22102). **Venue for June:** Starr Hill Brewery / Biergarten (Outdoor) **\*\*\* The Biergarten is primarily an outdoor venue, if the weather isn't cooperating we'll shift into Brewpub located on the ground level next to Capital One Hall \*\*\*** In the early 1990s, Charlottesville native, Mark Thompson took his biology degree from James Madison University and moved to Portland, Oregon, ground zero for craft beer’s growth in America. The natural blend of art and science poured into the brewing scene inspired him to take up the craft. Working alongside brewers in Oregon and Colorado, Mark honed his own artisan beer recipes. An old friend looking to start a brewpub and music hall back in Charlottesville eventually lured Mark back to Virginia. In September 1999, they partnered to found Starr Hill Brewery out of a passion for great beer and live music. Named after the local neighborhood, the brewery shared its original space with the Starr Hill Music Hall. The historic storefront on Main Street was once home to the state of Virginia’s first craft brewing operation, Blue Ridge Brewing Company. **Additional Info:** We are an inclusive group, so if we missed anyone please let us know or if you want to bring your significant other/spouse please do. Have a great week and see you next month! Cheers, Rinaldi Rampen & Mike McCabe of @NoVABeerSec

**Inflow 6:00 PM - Talks Start \~6:30 PM** **Reston Community Center - 2310 Colts Neck Rd, Reston, VA 20191** NoVA Hackers is a group located in the Northern Virginia area and is made up of Information Security Professionals from all walks of life, from government and private sector, to students and beginners. The monthly meetings are held much like a mini-conference with 4-8 speakers and only a few basic but strict rules. Participation and Permission Active Participation is required for continued membership and is the only due required. Permission is required to be obtained from anyone providing information to the group from the person providing it to be made public by anyone other than the provider. Historically our talks generally run a bit late and we have a hard stop at 9:30pm for the room. If you want to socialize we recommend you arrive at 6 to meet and greet before the talks. Agendas and remote meeting option available after you join the group.

Important: Register on [AICamp website](https://www.aicamp.ai/event/eventdetails/W2026061814) is required for admission. **Description:** Welcome to the AI meetup in Washington DC. Join us for deep dive tech talks on AI, GenAI, LLMs and Agents, hands-on experiences on code labs, workshops, and networking with speakers and fellow developers. **Agenda:** \* 5:30pm\~6:00pm: Checkin, Food/drink and networking \* 6:00pm\~8:00pm: Tech talks and Q&A \* 8:00pm: Happy Hour at Courthouse Social (cross the street) **Tech Talk: Secure Developer Environments in the Age of AI Agents** **Speaker:** Patrick Brown (Coder) **Abstract:** Federal engineering teams are under pressure to ship faster while meeting some of the most demanding security and compliance requirements in the world. In this talk, Patrick Brown of Coder explores how cloud development environments (CDEs) give agencies a foundation to accelerate software delivery without sacrificing control — and why that foundation matters even more as AI-powered coding agents enter the workflow. He'll cover how CDEs keep source code off endpoints, enforce zero-trust access patterns, and provide the consistent, ephemeral infrastructure that both human developers and AI agents need to operate safely at scale. **Speakers:** Stay tuned as we are updating speakers and schedules. If you have a keen interest in speaking to our community, we invite you to submit topics for consideration: [Submit Topics](https://forms.gle/JkMt91CZRtoJBSFUA) **Sponsors:** We are actively seeking sponsors to support AI developers community. Whether it is by offering venue spaces, providing food, or cash sponsorship. Sponsors will not only speak at the meetups, receive prominent recognition, but also gain exposure to our extensive membership base of 5,000+ AI developers in D.C and 500K+ worldwide.

VIRTUAL PRESENTER. NOTE SPECIAL DATE: 2ND TUESDAY IN THE MONTH .NET 10 is here alongside a practically rewritten Visual Studio 2026. Learn about the new C# 14 features, VS2026 niceties, and more!

Come join us at Nova Labs for our monthly lockpicking meeting! We meet every third Wednesday at the Nova Labs Fairfax location at 3850 Jermantown Road. Learn about locks, lockpicking, lock modifications, and even lock smithing in our classroom environment. No tools, skills, or knowledge required, but feel free to bring any of those things with you! Our meetings are overseen by one or more locksmiths.