BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: How Shadow APIs Become an Attacker's Free Pass Into 
 Your\n   Cloud-Native App\n   Tags: Intermediate | AppSec Village | Creato
 r Talk/Panel\n   When: Saturday\, Aug 8\, 11:50 - 12:20 PDT\n   Where: LVC
 CW Level 1 Hall 2 604 (Appsec Village) Main Stage - [1]Map\n\n   Descripti
 on:\n\n   Old endpoints rarely die. They get forgotten. They survive refac
 tors\,\n   go-lives\, and cloud migrations\, quietly drifting outside the\
 n   visibility of gateway security testing. Many are inherited through\n  
  third-party SDKs\, shared libraries\, and open-source middleware that\n  
  teams never provisioned and never fully tracked. Built from a real\n   se
 curity review of a production mobile app\, this talk shows how a\n   legac
 y authentication endpoint quietly bypassed every modern control\n   around
  it. Through a live demonstration using only open-source\n   tooling\, we 
 show how forgotten APIs can become full paths to\n   compromise and why cl
 oud-native visibility models fail by design.\n\n   Speakers:Emma Yuan Fang
 \,Krity\n\n   SpeakerBio:  Emma Yuan Fang\n\n   Emma is a seasoned Securit
 y Architect specialising in cloud security\n   and AppSec. As Regional Pra
 ctice Lead at EPAM\, she leads a team of\n   security practitioners across
  the UK&I\, Switzerland\, and Germany. Her\n   focus has recently expanded
  into the intersection of LLMs\, MCP\, and\n   security\, exploring how ag
 entic AI systems reshape the threat\n   landscape. Beyond her day job\, Em
 ma is an award-winning conference\n   speaker\, a dedicated mentor\, and V
 ice President of WiCyS UK&I\, where\n   she champions diversity in the cyb
 er workforce.\n\n   SpeakerBio:  Krity\n\n   Krity is a dedicated cybersec
 urity professional with a strong\n   foundation in application security\, 
 data analysis\, and machine\n   learning. As an Application Security Engin
 eer at ServiceNow\, she\n   leverages her diverse experience and research 
 background to enhance\n   security practices. Beyond her technical role\, 
 Krity serves as the\n   Community & Development Lead at Breaking Barriers 
 Women in\n   Cybersecurity (BBWIC)\, a nonprofit dedicated to empowering w
 omen in\n   the field. Her work reflects a deep commitment to both advanci
 ng\n   cybersecurity and fostering inclusive community growth\, making her
  a\n   passionate advocate for innovation\, collaboration\, and leadership
  in\n   the industry.\n\n   '\n\n   1. #LVCCW_Level1_Hall2\n\n\n
DTEND:20260808T192000Z
DTSTART:20260808T185000Z
LOCATION:AppSec Village - LVCCW Level 1 Hall 2 604 (Appsec Village) Main St
 age
SUMMARY:How Shadow APIs Become an Attacker's Free Pass Into Your Cloud-Nati
 ve App
END:VEVENT
END:VCALENDAR