Samiksha Singhal
Security Engineer
NetApp
Samiksha Singhal is a security engineer with 6 years of experience in penetration testing, VAPT, red teaming, cloud security (AWS & Azure), DevSecOps, and security architecture reviews. She has discovered and disclosed four CVEs (CVE 2022 38843/44/45/46) and has developed internal security tools for phishing simulation and vulnerability management. Samiksha has also worked as a presales cybersecurity consultant, helping organizations assess risks and strengthen their security posture. Outside of work, she ranks in the top 1% on TryHackMe and actively participates in CTFs.
Speaker sessions
Briefings and Arsenals | Confirmed Speakers | No Session Assigned
Placeholder session for confirmed speakers without an assigned session, allowing them to be pushed to Swapcard and Visit.
- 07:30
- Tue
- 01 Dec
Stage:
Briefing Stage 2
Sessions Type:
Keynote
ThreatWeaver: AI-Powered Threat Modeling in the Developer IDE
Threat models often become outdated as applications change. Design documents, source code, and security findings live in separate places, making it difficult for teams to keep their analysis current.
ThreatWeaver is an open-source VS Code/Cursor extension that uses GitHub Copilot to perform STRIDE-based threat modeling on Confluence design documents and source code from GitHub or Bitbucket. It examines architectural threats in the design and implementation threats in code and pull requests as separate analyses.
This session follows a practical workflow: connect a sample application's design documents and repository, run an analysis, and review the findings inside the IDE. Reports are published to Confluence, and critical findings create Jira tickets for follow-up.
The demonstration then introduces a design or code change to show automatic re-analysis and how ThreatWeaver highlights new findings without repeating the full list. It also demonstrates the built-in validation gate, which helps filter potentially unsupported AI findings before publication.
Attendees will see the complete path from application context to security findings and remediation tracking. The session will cover setup requirements, including a GitHub Copilot license, and explain where human review remains necessary.
- 13:00
- Tue
- 01 Dec
Stage:
Arsenal 4
Sessions Type:
Keynote