Speaking

San Francisco, CA

The next attacker may not need to break in. In agentic systems, an action can be permitted—and still adversarial. This is not a talk about asking an LLM to just threat model.

North America Community Meeting · Vancouver, BC

In this talk, Stripe will share practical observations from the field describing “simple” environments where merchants rely largely on service providers for payments processing and contrast those with “complex” environments that directly contact or retain card data.

Strasbourg

Sponsored by Anthropic and Team Cymru. A hands-on hackathon that picked up where the Zero to Hero training ended: threat hunters and investigators applied it to track real-world threat and fraud actors.

Strasbourg

A hands-on workshop where defenders will leverage Claude Code + the Pure Signal Scout MCP to conduct a real threat intelligence investigations, using live Team Cymru data in a TLP:RED environment.

RISE-X NYC · New York

This session will provide a builder’s view of how fraud intelligence must evolve as adversaries use AI to accelerate their tactics. The next evolution is making that language operational, adaptive, and usable inside real investigative and intelligence workflows.

CyberCon · Frisco, TX

FT3 brings an ATT&CK-style model to fraud defense. This session breaks down how it actually gets operationalized, from classifying fraud behavior to building workflows teams can act on at scale.

RISE Ireland · Dublin, Ireland

Opening keynote on the power of the defender community and the responsibility of being in the room. The talk welcomed attendees on behalf of Stripe Security and centered on a simple idea: everyone present had the opportunity to change an outcome for the better.

RISE Ireland · Dublin, Ireland

A hands-on workshop where defenders use Claude Code and the Pure Signal Scout MCP to run real threat intelligence investigations.

San Francisco, CA

A Piper Sandler Cybersecurity CEO Summit session with Vincent Passaro and Team Cymru CEO Joe Sander on how AI is reshaping external threat detection, fraud intelligence, and internet-scale visibility.

Past the hype: security practitioners are becoming owners of outcomes, not just builders of tools. Explore how analyst judgment, agentic workflows, and product thinking can help small teams move problems that once felt too complex, too slow, or too expensive to solve.

RISE USA · San Francisco, U.S.

Using the butterfly effect as a metaphor, this keynote explored how trust, permission, and presence can shift complex systems in unpredictable ways, and how community gives legitimacy a path to travel.

FT3 gives fraud teams shared language for classification and a foundation for action, powering analyst workflows, machine-speed decisions, red team testing, and intelligence packages built for the real world.

Unconference · San Diego, CA

FT3 gives fraud defenders a common language to classify attacker behavior, connect patterns across cases, and turn isolated investigations into reusable operational intelligence.

Strasbourg, France

FT3 reaches one of the field’s most trusted global defender communities: Underground Economy. The talk presented Fraud Tools, Tactics, and Techniques as a shared framework for defending the financial ecosystem.

Unconference · Denver, CO

FT3 gives fraud defenders a common language to classify attacker behavior, connect patterns across cases, and turn isolated investigations into reusable operational intelligence.

RISE USA · San Francisco, U.S.

FT3 becomes a bridge across fraud, threat intelligence, and security operations. Session explores how shared language reduces translation loss and turns pattern recognition into operational leverage.

RISE Finland · Undisclosed Location (Baltic Sea)

FT3 evolves from concept into structure. The talk explored how fraud tactics, techniques, and workflows could be mapped with enough precision to support shared reasoning and defensive action.

RISE-X London · London, England

FT3 began as an early field signal: fraud needed a common language. The talk introduced the case for a framework that could help defenders classify behavior, compare patterns, and move beyond isolated casework.