Uploaded April 2026 | Updated September 2026, 2 weeks ago
Please subscribe to our YouTube channel @ youtube.com/@DevoxxForever
Subscribe to LinkedIn @ linkedin.com/company/voxxed-days-amsterdam
Follow us on Twitter @ twitter.com/voxxedamsterdam
Enterprise and government document systems hold terabytes of valuable unstructured information, yet most still rely on keyword and metadata search with little semantic context. Retrieval-Augmented Generation (RAG) promises a breakthrough, but tutorials rarely prepare you for regulated, large-scale environments.
In this talk, I’ll share lessons from building a RAG stack with Spring Boot, Elasticsearch, LangChain4j, Docker, and ActiveMQ, using both Azure OpenAI and Ollama. Expect concrete learnings on document chunking, enforcing access control, and keeping LLMs grounded in facts. Practical takeaways for anyone bringing RAG from demo to production.
Please subscribe to our YouTube channel @ youtube.com/@DevoxxForever
Subscribe to LinkedIn @ linkedin.com/company/voxxed-days-amsterdam
Follow us on Twitter @ twitter.com/voxxedamsterdam
Enterprise and government document systems hold terabytes of valuable unstructured information, yet most still rely on keyword and metadata search with little semantic context. Retrieval-Augmented Generation (RAG) promises a breakthrough, but tutorials rarely prepare you for regulated, large-scale environments.
In this talk, I’ll share lessons from building a RAG stack with Spring Boot, Elasticsearch, LangChain4j, Docker, and ActiveMQ, using both Azure OpenAI and Ollama. Expect concrete learnings on document chunking, enforcing access control, and keeping LLMs grounded in facts. Practical takeaways for anyone bringing RAG from demo to production.




![Are We Ready For The Next Cyber Security Crisis Like Log4Shell? - Soroosh Khodami
#VoxxedDaysCERN26
AI era is bright, but full of terrors!
In a world where vulnerabilities like Log4Shell, Spring4Shell, and the XZ Backdoor make headlines, securing our software ecosystem has never been more critical. In this session, Soroosh, a hands-on architect with experience working on security platform services for large enterprises like Rabobank, will share practical strategies and best practices for securing the software development process, applicable to both small startups and large organizations.
Key takeaways and questions that will be answered in this session:
[Live Demo] What is a Supply Chain Attack, and how dangerous can it be?
An example of lateral movement that begins with a basic SQL injection attack and escalates to gaining root access to a Kubernetes cluster
Exploring new attack vectors in the AI era and the defense strategies to detect, prevent and mitigate them
Most effective practices to secure your CI/CD process
Practical strategies on how Software Bill of Materials (SBOM) help us prepare for the next Log4Shell crisis?
What does DevSecOps mean, and what is its main objective? Are We Ready For The Next Cyber Security Crisis Like Log4Shell? - Soroosh Khodami](https://i.ytimg.com/vi/cCwISrQSgFY/mqdefault.jpg)





