Community of 100+ engineers, expert speakers, and a dive into protecting development pipelines. We’ll focus on real cases, discuss practical mitigations and security tools, and connect over pizza and beer. Valuable for DevOps, security professionals, architects, and anyone who wants to secure what they build.
The event has passed
Register to get the recordings
Register and get a snack before the talks begin.
Focus — the other side of AI-powered progress: AI-driven risk.
- How AI is changing the way teams build and secure software
- When AI itself becomes an attack vector (prompt injection, data poisoning, model manipulation)
- Using AI to detect and respond to threats
- Responsible use, transparency, and trust in AI systems
- What skills security engineers will need next
Dror Zalman, Segey Pronin, Alexey Krasnov, Kiryl Surahatau
A talk from an engineer at one of Israel’s leading cybersecurity companies about real cases of misconfigurations and exploits, including the recent tj-actions/changed-files issue.
Igor will show how third-party or transitive actions can open attack paths inside your pipeline.
He’ll also demo a new tool that maps and analyzes transitive dependencies between actions, helping teams understand their impact and reduce exposure.
See how security tools — from static analysis to runtime monitoring — fit together to protect CI/CD environments, and learn practical steps for securing your own workflows.
Igor Stepansky
Security Engineer, Orca Security
Michał will share an unusual take on supply-chain attacks and show what happens when these techniques combine with insider scenarios.
Learn how an attacker with developer-level repo access can abuse technical debt in CI/CD to gain control over production environments like Docker or Kubernetes while staying invisible to threat detection systems.
The talk focuses on the defensive perspective: we’ll look at realistic chains of misconfiguration and detection gaps and then cover practical mitigations you can apply immediately.
Michał El Fartas
Cloud Security Team Lead, Egnyte
Save your seat at the meetup.
Register to get the recordings of the talks.
Thanks for registering! We will email you the details before the event.
Thank you!
The recordings will arrive in a few minutes.
TechSpot is organized by On The Spot Development. We build offshore development centers in Poland for global tech companies and offer local engineers the opportunity to join them. See open positions below.
Conversations with top engineers, CTOs, and founders about day-to-day engineering and everything that excites us about tech.
Insights on industry trends, market analysis, and our perspective on the tech sector.
Essential cookies keep the site working and cannot be turned off. Everything else is your choice, and you can change it at any time from the footer.
Full list of cookies, with providers and retention periods, is in our Cookie Policy.
Required for page loading, security, and form submissions. The site does not work without them.
Google Analytics 4 via Google Tag Manager. Shows us which pages people read and where they leave. Data is aggregated.
HubSpot and LinkedIn. Lets us see which campaigns bring visitors and show relevant ads. If this is off, we cannot tell where your visit came from.
.png)
.svg)
.png)
%201%402x.svg){kind=logo}
%201.svg){kind=logo}
.svg)
