# Speaking: talks, workshops and podcasts by Liran Tal 225 talks across 21 countries since 2013: AI and agentic security, software supply chain security and Node.js secure coding. Canonical: https://lirantal.com/speaking Speaking · Booking 2027 # Security talks, hacked live on stage. Talks, workshops and podcasts about AI and agentic security, software supply chain attacks and Node.js secure coding. Most sessions break a real application in front of the audience and then fix it. Every talk is adapted to its audience, in English or Hebrew. [Invite me to speak](https://www.linkedin.com/in/talliran) [Browse the talks](/speaking/talks) ![Liran Tal on stage at JSNation US 2025, presenting from the lectern](/_astro/speaking-hero.DpA-4YgT_1vdvp4.jpg) talks delivered 225 talks delivered · conferences, meetups, webinars countries 21 countries · 42 cities recordings 136 recordings · talks and podcasts on video on stage since 2013 on stage since · 3 languages Next on the calendar ## Come and say hello. [Full schedule and archive](/speaking/events) 1. [17th Nov 2026 ### 🇮🇱 LLMDay + Data TLV Tel Aviv, Israel · Talk: From Second Brain to AI Chief-of-Staff: Engineering an Assistant That Runs Your Workweek Upcoming Meetup ](/speaking/events/2026-11-17-llmday-data-tlv) 2. [23rd Oct 2026 ### 🇺🇸 AGNTCon + MCPCon North America 2026 San Jose, California, United States · Talk: Your AI Agent Installed Malware Because a SKILL.md Told It To Recently Conference ](/speaking/events/2026-10-23-agntcon-mcpcon-north-america-2026) 3. [15th Oct 2026 ### 🇺🇸 AI Security Summit San Francisco, California, United States · Talk: Open Source at the Inflection Point: A Fireside Chat with Anthropic on AI-Powered Defense Recently Conference ](/speaking/events/2026-10-15-ai-security-summit) 4. [17th Sep 2026 ### 🇳🇱 AGNTCon + MCPCon Europe 2026 Amsterdam, Netherlands · Talk: Giving Your Agentic Coding AI a Security Brain Recently Conference ](/speaking/events/2026-09-17-agntcon-mcpcon-europe-2026) ## Things I talk about. [All 149 talks](/speaking/talks) * 41 talks · 63 deliveries ### [Node.js & web security](/speaking/talks?topic=nodejs-web) Live hacking of Node.js, React and TypeScript applications: path traversal, prototype pollution, injection and how to fix them. Most requested: Char Wars: The Path Traversal Strikes Back * 33 talks · 51 deliveries ### [Software supply chain](/speaking/talks?topic=supply-chain) Malicious npm packages, typosquatting, lockfile injection and the state of open source security, told through real incidents. Most requested: Are We Forever Doomed By Software Supply Chain Security? * 25 talks · 37 deliveries ### [Secure coding & AppSec](/speaking/talks?topic=appsec) Security testing, secure coding practices and building security into the development workflow. Most requested: Stranger Danger: Finding Security Vulnerabilities Before They Find You! * 23 talks · 32 deliveries ### [AI & agentic security](/speaking/talks?topic=ai-security) How LLMs, coding agents and MCP servers get tricked into shipping vulnerable code or running malware, and the guardrails that stop them. Most requested: Your AI Agent Installed Malware Because a SKILL.md Told It To * 10 talks · 19 deliveries ### [Containers & cloud](/speaking/talks?topic=containers) Breaking into Docker images and serverless functions to show what attackers find there. Most requested: Black Clouds and Silver Linings in Node.js Security * 12 talks · 17 deliveries ### [DevRel & community](/speaking/talks?topic=devrel) Developer advocacy, open source contribution and growing developer communities. Most requested: The Secret Life of Developer Advocates * 5 talks · 6 deliveries ### [Developer tooling & testing](/speaking/talks?topic=dev-tooling) Testing patterns, API contracts, CLI craft and the developer tooling that ships with them. Most requested: Jest Testing Patterns Recordings ## Watch a recent talk. [All 136 recordings](/speaking/recordings) * [ ![](https://i.ytimg.com/vi/oJGX8GYLWxg/hqdefault.jpg) Conference Jun 2026 ### Your AI Agent Installed Malware Because a SKILL.md Told It To AI Native Dev 2026 ](/speaking/events/2026-06-01-ai-native-dev-2026) * [ ![](https://i.ytimg.com/vi/BH8Hs5ABb-8/hqdefault.jpg) Podcast Feb 2026 ### The Context: Episode 32 ft. Snyk The Context ](/speaking/events/2026-02-26-the-context) * [ ![](https://i.ytimg.com/vi/NBDrWgfYfYU/hqdefault.jpg) Webinar Dec 2025 ### Preventing the next sha1-hulud: Zero Day Best Practices Snyk Webinar ](/speaking/events/2025-12-22-snyk-webinar) ## Formats 119 [Conference talks](/speaking/events?type=conference) Main-stage and track sessions at developer and security conferences. 55 [Meetup talks](/speaking/events?type=meetup) Community evenings: more conversational, more questions, more pizza. 41 [Webinars & livestreams](/speaking/events?type=webinar) Virtual sessions and livestreams with live Q&A. 11 [Workshops](/speaking/events?type=workshop) Hands-on sessions where attendees hack, then fix, real applications. 44 [Podcast episodes](/speaking/podcasts) Guest appearances on developer and security podcasts. 3 [Guest articles](/speaking/podcasts) Guest posts written for partner and vendor blogs. ## Year by year 1. [2013](/speaking/events?year=2013) 1 2. [2016](/speaking/events?year=2016) 7 3. [2017](/speaking/events?year=2017) 9 4. [2018](/speaking/events?year=2018) 8 5. [2019](/speaking/events?year=2019) 35 6. [2020](/speaking/events?year=2020) 19 7. [2021](/speaking/events?year=2021) 59 8. [2022](/speaking/events?year=2022) 48 9. [2023](/speaking/events?year=2023) 30 10. [2024](/speaking/events?year=2024) 23 11. [2025](/speaking/events?year=2025) 23 12. [2026](/speaking/events?year=2026) 11 ### Been there * [🇮🇱 Israel 56](/speaking/events?country=IL) * [🇷🇴 Romania 15](/speaking/events?country=RO) * [🇪🇸 Spain 10](/speaking/events?country=ES) * [🇺🇸 United States 7](/speaking/events?country=US) * [🇬🇧 United Kingdom 6](/speaking/events?country=GB) * [🇳🇱 Netherlands 5](/speaking/events?country=NL) * [🇮🇹 Italy 5](/speaking/events?country=IT) * [🇮🇪 Ireland 5](/speaking/events?country=IE) * [🇨🇦 Canada 5](/speaking/events?country=CA) * [🇭🇷 Croatia 3](/speaking/events?country=HR) * [🇨🇭 Switzerland 3](/speaking/events?country=CH) * [🇩🇪 Germany 2](/speaking/events?country=DE) * [🇫🇮 Finland 2](/speaking/events?country=FI) * [🇫🇷 France 2](/speaking/events?country=FR) * [🇺🇦 Ukraine 2](/speaking/events?country=UA) * [🇸🇪 Sweden 1](/speaking/events?country=SE) * [🇨🇿 Czech Republic 1](/speaking/events?country=CZ) * [🇭🇺 Hungary 1](/speaking/events?country=HU) * [🇱🇹 Lithuania 1](/speaking/events?country=LT) * [🇵🇱 Poland 1](/speaking/events?country=PL) * [🇧🇬 Bulgaria 1](/speaking/events?country=BG) From the audience ## What people say. [More recognitions](/recognitions) * > “After being in a workshop by @liran\_tal and realizing that RegExps can be exploited fairly easily, I decided to use a validation library. I even contributed to the @DefinitelyTyped definition of it :D” [Fernando Carrascosa · Tech Lead](https://twitter.com/fcarrascosa_dev/status/1543694130940870659) * > “Thanks Liran! The island tech community is wonderful and we're proud to be part of it. Your presentation was fantastic and spurred discussion at our firm about how to be more deliberate about web security.” [Sebastian Good · Co-founder of @experoinc](https://twitter.com/sebastiangood/status/1523063592740077568?s=20&t=65FSTY4xgeIV5ZTdYvqd0w) * > “Being part of @canariasjs staff gives me the privilege to attend and record @liran\_tal workshop. Wonderful professional and better person. #JSDayCAN2022” [Goyo Regalado · Software Engineer](https://twitter.com/goyoregalado/status/1522254938373603332?s=20&t=TZUultVDBKnPYj1mIZFhzg) * > “Excellent talk by @liran\_tal at @devseccon TLV. We know that open source packages are dangerous - containers contain lots of them and are VERY dangerous!” [Ethan Schorer · AppSec Team Leader, Monday.com](https://twitter.com/ethan_sec/status/1191723303565766656) * > “Convinced I gotta get @snyksec into my projects after seeing @liran\_tal's talk on security. @VoxxedFrontend” [Vlad Durnea · CEO @madapes](https://twitter.com/durnea/status/1131181340882292737) Booking 2027 ## Tell me about your event. Conference keynote, meetup talk, workshop or podcast: send me the audience, the format and the dates, and I'll tailor a session to fit. [Invite me to speak](https://www.linkedin.com/in/talliran) [Message me on X](https://x.com/liran_tal) [Browse the talks](/speaking/talks)