RVAsec

09/23/2026

RVAsec 16 Is Happening- Yes, RVAsec 16 is happening.
Save the dates.
June 9-10, 2027
After 15 years, we weren’t quite ready to call it.
We’ll see you in Richmond for RVAsec 16.

More soon.

Join us for RVAsec 16 happening on June 9-10, 2027. Don't miss this exciting event in Richmond.

07/13/2026

Daniela Lulli delivered a fantastic session at RVAsec 15 that every security professional working with AI systems should watch.

She breaks down the full AI attack surface — from training data poisoning to adversarial inputs — and explains why securing AI means securing every layer of data that touches it, not just the model itself.

🎥 Watch the full session here: https://youtu.be/YJHOpPjU3ks?si=TT0g3djpeNnkyuZb

What part of the AI pipeline do you think is most overlooked from a security perspective? Drop it below 👇

Presentation: Robots vs Robots – Securing AI and the Data that Pow...

07/12/2026

Chelsea Bryan delivered a fantastic session at RVAsec 15 that every security leader and practitioner who wants to build a stronger security culture should watch.

Cybersecurity PhD student at VCU. She makes the case that community is a control — not just a nice to have — and breaks down how professional connection directly reduces security risk.

🎥 Watch the full session here: https://youtu.be/hCTx3rgmGyI?si=4jJieshTwyZb3qKV

Who in your professional network has made the biggest impact on your security career? Drop it below 👇

Presentation: Community is a Control: Strengthening Cybersecurity ...

07/11/2026

Evan Typanski delivered a fantastic session at RVAsec 15 that every network defender and detection engineer should watch.

Software Engineer at Corelight and maintainer of the Zeek project. He walks through how to build custom network detections for protocols that no off-the-shelf tool covers using Zeek and Spicy.

🎥 Watch the full session here: https://youtu.be/NPToZ5OJ9zY?si=z5aJPbGRC53vsIx_

Are you running custom detections or relying purely on vendor rules? Drop it below 👇

Presentation: Building Custom Detections with Zeek and SpicyDisco...

07/10/2026

Jason Ross delivered a fantastic session at RVAsec 15 that every red teamer and AI security professional should watch.

Product Security Principal at Salesforce. He breaks down how social engineering AI systems is fundamentally different from social engineering people — and why attackers are already exploiting that gap through prompt injection and goal hijacking.

🎥 Watch the full session here: https://youtu.be/KfzAUf-grKI?si=XG9sTROJEVUpV56z

Has your org started thinking about social engineering as a threat against your AI systems? Drop it below 👇

Presentation: Social Engineering The Machine: When Your Target Runs...

07/09/2026

Ryan O'Donnell delivered a fantastic session at RVAsec 15 that every Microsoft 365 defender and blue team should watch.

Security Engineer at Microsoft. He walks through how to turn your own M365 documents and emails into tripwires using canary tokens — so you know the moment an attacker starts collecting your data.

🎥 Watch the full session here: https://youtu.be/EWvleH0zWH8?si=9QjvjhlxDX29yo_t

Are you using canary tokens anywhere in your environment right now? Drop it below 👇

Presentation: Catching Collection in M365: Outlook and SharePoint C...

07/08/2026

Victoria Mosby delivered a fantastic session at RVAsec 15 that every security professional who has ever struggled to get executive buy-in should watch.

Founder of Basilisk Security. She breaks down a five step framework for turning technical security findings into stories that executives actually act on — not just nod at.

🎥 Watch the full session here: https://youtu.be/SX5bMfV8vRM?si=_IZNVYwC-TZhC-1i

What's the hardest part of communicating security risk to your leadership team? Drop it below 👇

Presentation: Use It Monday: A 5-Step Method for Turning Security F...

07/07/2026

Paul Brownridge delivered a fantastic session at RVAsec 15 that every developer and security engineer building or defending AI chatbots should watch.

Pe*******on Tester at Pen Test Partners. He walks through real vulnerabilities in AI chatbot agents and shows exactly how attackers are exploiting them right now.

🎥 Watch the full session here: https://youtu.be/O0GSxg3guTM?si=POiNQGj5N-xRSe4D

Has your org done any security testing on your AI chatbot integrations yet? Drop it below 👇

Presentation: Flirting With AI: Pwning Web Sites Through Their AI ...

07/06/2026

Kim Mahan delivered a fantastic session at RVAsec 15 that every SOC analyst and security leader dealing with alert fatigue should watch.

Director of Cybersecurity at MAXX Potential. She breaks down why alert fatigue is a misdiagnosis — it's not about the volume of alerts, it's about people, process, and culture. And she gives practical ways to fix it.

🎥 Watch the full session here: https://youtu.be/9QBEnfe6lNo?si=3MV_ECXvIYV_B1KW

What's the biggest driver of alert fatigue at your org? Drop it below 👇

07/05/2026

Vas Khomyk delivered a fantastic session at RVAsec 15 that every cybersecurity professional looking to break into or level up in the industry should watch.

Founder of Hampton North. He breaks down exactly what hiring managers are looking for and gives practical frameworks for standing out in a crowded job market.

🎥 Watch the full session here: https://youtu.be/qr_wvIZJEpI?si=kl1a78VF-Ic6FFCY

What's the one thing you wish someone told you earlier in your security career? Drop it below 👇

Presentation: The Interview Engine: A Career Readiness Framework...