Olivia A. Gallucci

• Speaker mentorship program.
• Objective by the Sea is the Apple security conference run by the Objective-See Foundation.

• Talk: When Queues Become Vulnerabilities: Reverse Engineering GCD, XPC Races, and macOS Detection Engineering
• Watch on YouTube · Slides · Talk listing
• Black Hat USA, in Las Vegas, is one of the largest security conferences in the world.

• Keynote: Between the Lines: Exploring macOS Internals through Apple’s Open Source Software
• Watch on YouTube · Speaker list
• MacDevOps is a conference for Mac admins and engineers; the 2026 edition was in Montréal.

• Talk: AI-Assisted Vulnerability Research on Apple’s Operating Systems
• Watch on YouTube · Event page
• NYC Systems is an independent, community-run talk series about systems programming.

• Talk: Just-In-Time Compilation and JIT Memory Regions on macOS
• Talk listing
• SecretCon is a hacker conference in St. Paul, Minnesota.

• Talk: macOS Vulnerability Research: Augmenting Apple’s Source Code and OS Logs with AI Agents
• Conference website
• The first U.S. edition of Ekoparty, the hacker conference founded in Buenos Aires.

• Talk: Weaponizing Vtables: Detection Engineering for Kernel-Space Exploits in macOS
• Watch on YouTube · Schedule
• BSides Tampa is a community-run security conference in Tampa, Florida.

• Talk: macOS Vulnerability Research: Augmenting Apple’s Source Code and OS Logs with AI Agents
• Watch on YouTube · Slides · Talk listing
• DEF CON’s first conference in Southeast Asia, held at Marina Bay Sands.

• The conference was postponed.
• OOTB (Out Of The Box) is a security conference in Jakarta from the team behind Hack In The Box.

• Talk: Asynchronous Flaws: Exploiting and Detecting Dispatch Queue Misuse on macOS
• Watch on YouTube · Talk listing
• CypherCon is Wisconsin’s hacker conference, held in Milwaukee.

• Talk: Detecting Race Conditions on macOS
• Watch on YouTube · Talk listing
• BSidesSF is a community-run security conference in San Francisco.

• Talk: Just-In-Time Compilation and JIT Memory Regions on macOS

• Talk: macOS Vulnerability Research: Augmenting Apple’s Source Code and OS Logs with AI Agents
• Watch on YouTube
• [un]prompted is a conference for AI security practitioners.

• Career panelist for red team and offensive security engineering.
• The Women’s Society of Cyberjutsu is a nonprofit that helps women advance in cybersecurity.

• Talk: macOS Internals for Threat Detection Engineers: Logs, ESF, and Automation Utility Risks

• Talk: Porting Linux Exploits to macOS

• Talk: Syscalls and Stacks: A Guide to Cross-Platform Exploitation on macOS and Linux
• Slides · Conference website
• BSides Ottawa is a community-run security conference in Ottawa, Canada.

• Talk: macOS Internals for Threat Detection Engineers: Logs, ESF, and Automation Utility Risks
• Watch on YouTube · Slides · Talk listing
• Objective by the Sea is the Apple security conference run by the Objective-See Foundation.

• Secret!

• Talk was accepted, but I was unable to attend as the conference fell within the first three months of starting a new job, and I didn’t have prior approval for time off. Next year! :)

• Talk: The Anatomy of a Mach-O: A Structured Guide to macOS Internals
• Schedule
• BSidesNEPA is a community-run security conference in northeastern Pennsylvania.

• Talk was accepted, but I was unable to attend as the conference fell within the first three months of starting a new job, and I didn’t have prior approval for time off. Next year! :)

• Talk was accepted, but I was unable to attend as the conference fell within the first three months of starting a new job, and I didn’t have prior approval for time off. Next year! :)

• Both talks were accepted, but I was unable to attend as the conference fell within the first three months of starting a new job, and I didn’t have prior approval for time off. Next year! :)

• Talk was accepted, but I was unable to attend as the conference fell within the first three months of starting a new job, and I didn’t have prior approval for time off. Next year! :)

• Talk was accepted, but I was unable to attend as the conference fell within the first three months of starting a new job, and I didn’t have prior approval for time off. Next year! :)

• Talk: Unlocking macOS Internals: A Beginner’s Guide to Apple’s Open Source Code
• Watch on YouTube · Talk listing
• BSides Buffalo is a community-run security conference in Buffalo, New York.

• Talk: Unlocking macOS Internals: A Beginner’s Guide to Apple’s Open Source Code
• Watch on YouTube · Talk listing
• RVAsec is a security conference in Richmond, Virginia.

• Talk: Unlocking macOS Internals: A Beginner’s Guide to Apple’s Open Source Code
• Watch on YouTube · Schedule
• BSides312 is a community-run security conference in Chicago.

• Talk: Elements of Cross-Platform Exploitation: A Guide
• Schedule
• THOTCON is Chicago’s hacking conference.

• Talk: Unlocking macOS Internals: A Beginner’s Guide to Apple’s Open Source Code
• Talk listing
• BSides Vancouver is a community-run security conference in Vancouver, Canada.

• Student panelist on finding a first co-op and what the job is like.

• Student panelist on finding a first co-op and what the job is like.

• I was the first speaker at the first BSides Zadar conference! :D
• This was talk No. 1 on the list.
• Not recorded.
• BSides Zadar is a community-run security conference in Zadar, Croatia.

• This was talk No. 2 on the list :)
• Not recorded.

• Panelists: Michael Brodskiy, Amit Shenoy, and Olivia Gallucci
• Schedule
• LibrePlanet is the Free Software Foundation’s annual conference.

• Lightning talk.
• Talk page

• 50-minute technical talk.
• Watch on YouTube · Speaker list
• BSides Rochester is a community-run security conference in Rochester, New York.

• Panelists: Alex Beaver, Joe Abbate, and Olivia Gallucci
• Student panelist on finding a first co-op and what the job is like.

• Student panelist on finding a first co-op and what the job is like.

• Student panelist on finding a first co-op and what the job is like.

• Easy EASM, with Jason Haddix and Gunnar Andrews.
• Watch on YouTube · GitHub
• Recon Village is the reconnaissance and open-source intelligence village at DEF CON.

• Panel: Bugs, Bounties, and Breaches
• With Jason Haddix, Ben Sadeghipour, Wesley Thurner, Sam Curry, and Arian E.
• Watch on YouTube

• Easy EASM: the zero-dollar attack surface management tool, with Jason Haddix and Gunnar Andrews.
• Black Hat listing · GitHub
• Arsenal is where researchers demo open-source tools live at Black Hat USA.

• Student panelist on finding a first co-op and what the job is like.

• Student panelist on finding a first co-op and what the job is like.

• Student panelist on finding a first co-op and what the job is like.

• A presentation for RIT’s WiCyS student chapter.

• An unrecorded presentation about my scholarship story and how to apply for scholarships strategically.
• RITSEC is the RIT security club.

• Fire talk about research I did at Open@RIT (not Apple).
• Project information
• WiCyS is the annual Women in CyberSecurity conference.

• 30-minute talk.
• Project information

• Honors Independent Research Presentation.
• I presented my research to around twenty students.
• Project information

• Fifteen-minute presentation with three activities involving grep, awk, and find.

• 30-minute talk.
• Watch a very similar presentation on YouTube · Project information
• RITLUG is the RIT Linux Users Group.

• Panelists: Ann Byerley, Matt Eggert, and Olivia Gallucci
• We shared our experiences working remotely and in person during COVID.

• 30-minute talk.
• Watch on YouTube · Project information
• RITSEC is the RIT security club.

• My research was a Fire Talk at the WiCyS international conference in Denver, Colorado.
• I won a full conference scholarship to present my research.
• Watch on YouTube · Project information
• WiCyS is the annual Women in CyberSecurity conference.

• Watch on YouTube · Project information

• I was a student panelist on New York City’s GenCyber Student and Professional Panel.
• GenCyber runs cybersecurity camps for students and teachers.

• Presented with the RITSEC President and Head of Research.
• Hour-long meeting discussing club activities, student life, and Q&A.
• Around fifteen attendees.

• Presented with the RITSEC President and Head of Research.
• Covered a ten-minute segment on RITSEC.
• Around thirty attendees.

• I presented my Honors research project to around thirty students.
• This research became a Fire Talk at the Women in CyberSecurity (WiCyS) International Conference in Denver, Colorado. I won a full conference scholarship to present it.
• Watch a very similar presentation on YouTube

• Honors Independent Research Presentation.
• I presented my research to seventeen faculty members.
• I was able to onboard two faculty contributors after my presentation.
• After this presentation, I was paid by Open@RIT to continue this project.
• All of the work I analyzed is in this Zotero collection.
• Project information

• I was one of two freshman student panelists at RIT’s open house for prospective Computing Security students.
• I covered various topics surrounding RIT, such as student life, academics, RITSEC, WiCyS@RIT, academic opportunities in Free and Open Source Software, and sailing.

• I was one of two freshman student panelists at RIT’s open house for accepted Computing Security students.
• Topics I covered included student life, academics, RITSEC, RIT’s WiCyS Chapter, RIT’s Free and Open Source Software program, and sailing.

• Covers what the WiCyS career fair is, how it works, and why freshmen and sophomores should attend the fair.
• Not recorded.

• Co-presented with Bradley Harker, Lukas Harris, and Michael Moore.
• Covers the Rubber Ducky Mentorship Group’s research projects.
• Lukas Harris wrote a blog post about his research: Blocking USB Rubber Ducky Attacks: and other badusb mitigation with udev rules and Group Policy.
• Watch on YouTube

Selected tips from the Diana Initiative.

• Collection of CFP Tips rounded up and shared by CircuitSwan.
• Conference Submissions for the Faint of Heart from Amelie Koran and Nicole Schwartz.
• Blog post by Kat Sweet on the building blocks of an InfoSec conference CFP.
• The CFPs 101 Panel from BSidesLV 2016.
• The DEFCON Speaker’s Corner post by Nikita titled How do I Make my CFP Stand Out?
• Blog post by Cheryl Biswas about giving a talk in Infosec.
• Presentation Tips for Technical Talks by Tanya Janca.
• CFP Submission Guideline (CFP Workshop) LinkedIn Post found by Meghan Jacquot.
• CFP WiCyS MAA Workshop shared by Maghan Jacquot.

• How to Write a CFP That Actually Gets Read by Britt Kemp at Bishop Fox
• Confessions of a Public Speaker – Tips for Security Practitioners by Phil Venables
• Slide hosting at Speaker Deck if you do not have a domain

• Code formatter for presentations by Roman Nurik
• Icons8
• macOS icon gallery
• iOS icon gallery
• Geographical maps