Brainberg

Cybersecurity & InfoSec Events in Europe

European infosec has its own character: community-run, less vendor-dominated than its US counterpart, and unusually healthy at the meetup layer. This page tracks the conferences, BSides events, OWASP chapter meetings, AppSec sessions, red-team/blue-team meetups, and capture-the-flag gatherings that make up that scene.

At the large end, you'll find Black Hat EU, Hack.lu, Hack in Paris, NorthSec, CONFidence (Kraków), No Hat (Italy), FOSDEM's security track, and the BSides family that covers cities across the continent (Porto, Budapest, Kraków, Luxembourg, Prague, and beyond). At the community end, OWASP chapter meetups run in every significant tech city, alongside HackTheBox community meetups, Cyber Fresque awareness events, and active local groups for cloud security, cryptography, and reverse engineering. The Chaos Computer Club congresses and related hacker-culture events live in the adjacent Hacker & Maker category rather than here, since the audience and tone are distinct.

Topics span the real breadth of the field: web and mobile AppSec, cloud security (the Kubernetes and AWS attack surfaces in particular), threat modeling, incident response, malware analysis, red teaming, hardware hacking, privacy and cryptography, plus the policy/regulatory tracks that have grown around NIS2, the Cyber Resilience Act, and related European frameworks. Brainberg aggregates these into one feed, so the full European schedule lives in a single view.

Upcoming events

SecurityConferenceFree

Digital & Green Skills for Europe: Innovation, Reskilling, Cybersecurity

Brussels, 🇧🇪 Belgium

EU projects on digital innovation, green reskilling, and cybersecurity in the context of European Youth Week 2026.

The European Youth Week 2026 provides an ideal space to reflect on how Europe can equip young people with the skills needed to thrive in a rapidly changing digital and green economy. In this context, Fundación Finnova is pleased to invite you to the event:

Digital & Green Skills for Europe: Innovation, Reskilling and Cybersecurity

The programme will showcase three EU‑funded projects that address strategic skills needs for Europe’s future. The 5G‑DiGITs project focuses on strengthening digital transformation and industrial competitiveness through advanced 5G innovation and connectivity. The LIFE RESSKILL project supports green reskilling and training initiatives aimed at preparing the workforce for the circular and sustainable transition. Erasmus Cyberskills contributes to enhancing digital and cybersecurity competences through targeted education and training activities for young people and emerging talent.

There will be featured contributions from representatives of European institutions, research and innovation ecosystems, industry and training organisations, as well as experts involved in EU‑funded digital, green and cybersecurity initiatives, offering complementary perspectives.

The event is open to young professionals, students, policymakers, project managers, organisations working on EU‑funded initiatives, and anyone interested in the development of digital and green skills for Europe.

Date: Friday, 27 April 2026
Time: 15:00 – 17:00 (CEST)
Location: Avenue des Arts 56, Brussels
Format: Hybrid (on‑site and online participation)

Further details and the final agenda, including confirmed speakers, will be shared shortly.

Mon 27 Apr 17:00 – Wed 27 May 19:00
SecurityMeetupFree

Воркшоп: Security Architecture in Practice

🤔 Знаєте OWASP Top 10, але вразливості все одно з’являються знову?
🪄 Дізнайтеся, як проєктувати безпечні системи на воркшопі Security Architecture in Practice від Fwdays Academy!

📅 Коли? 6 та 9 травня
👉 Реєстрація та деталі: https://bit.ly/4uiXXJN
🤑 До 15 березня діють спеціальні ціни для Early Birds!

Більшість проблем із безпекою виникає не через окремі баги, а через архітектурні рішення. На цьому воркшопі ви розберетеся з реальними сценаріями атак на веб- та SaaS-системи й побачите, як переходити від реактивного «латання дір» до підходу Secure by Design.

👨‍🏫 Ментор: Станіслав Клевцов — Security Engineering Lead у Creatio, 11+ років досвіду в інформаційній безпеці: від роботи в ЗСУ до побудови security-процесів у глобальних SaaS-продуктах.

Результат воркшопу:
🎯 розуміння, як атакуючі експлуатують помилки в додатках та інфраструктурі
🎯 архітектурні патерни Secure by Design
🎯 навички Threat Modeling для додатків і інфраструктури
🎯 розуміння, як інтегрувати security у SDLC
🎯 вміння бачити архітектурні причини вразливостей, а не лише їх симптоми

🔐 Отримайте практичні навички security-архітектури разом з Fwdays Academy!

Wed 6 May · 16:00< 50
SecurityMeetupFreeOnline

CyberConnect: Virtual Career & Networking Hub for Cybersecurity Pros

Whether you're a SOC analyst, red teamer, threat intelligence expert, or just breaking into the field — CyberConnect is your global destination for building meaningful connections and exploring opportunities in the cybersecurity domain.

This powerful, cybersecurity networking event online brings together cybersecurity specialists, hiring companies, and solution providers in an unmoderated, self-managed, community-led virtual environment. Perfect for job seekers, employers, freelancers, and infosec enthusiasts alike — this event enables career growth, peer learning, and real-time knowledge sharing.

🎥 Watch how the event works with our explainer video:
👉 https://www.youtube.com/watch?v=VToIVvIjIPY

💬 What to Expect at CyberConnect:
Join a rich virtual environment where you can chat in real time, join discussions in group channels, or conduct 1-on-1 video conversations to dive deeper into opportunities and collaborations.

This online community for cybersecurity specialists features curated channels for open conversation and focused professional engagement:

  • General – Your orientation hub for intros, announcements, and casual conversation.
  • Intros – Introduce yourself, your role in cybersecurity, or just share a fun fact and meet peers.
  • Networking – Showcase your current projects, open-source contributions, or job aspirations.
  • Help Wanted – Post or respond to open calls for SOC support, pen testers, or digital forensics pros.
  • Industry Room Tech – Stay sharp on industry trends, tools, frameworks, and methodologies.
  • CTFs & Collaboration – A dedicated zone for ethical hacking collaboration groups and red/blue team brainstorming.
  • Tools & Techniques – Discuss and demo the latest utilities, workflows, and cyber strategies in this cybersecurity skill sharing platform.

This is not just a virtual cyber career fair — it's a living, breathing ecosystem for cybersecurity innovation, learning, and hiring.

📍 Where:
Join virtually at:
👉 https://events.tao.ai/pod/analytics.club/pu2wlhti0luw
🕓 When:
Sessions run from 4:00 PM – 6:00 PM local time. Drop in to connect and contribute.

👤 Who Should Attend:

  • Cybersecurity professionals across SOC, GRC, DevSecOps, and penetration testing
  • Recruiters and employers hiring cybersecurity talent
  • Students and graduates exploring careers in ethical hacking or cyber defense
  • Researchers, consultants, and cyber product developers
  • Anyone passionate about infosec, privacy, and threat detection

🧠 Why Attend:

  • Connect with like-minded professionals across the globe
  • Explore real-time hiring opportunities or freelance gigs
  • Discover new tools and red/blue teaming techniques
  • Join hands-on channels for community-driven knowledge exchange
  • Demo your work or learn from the best in AI-driven security, cloud security, and more
  • Build strong relationships in the cyber domain through 1-1 video/text chats

❓ Have Questions or Suggestions?
Reach out to us at:
👉 https://noworkerleftbehind.org/event_support

🔖 Hashtags:
#CyberConnect #CybersecurityNetworkingEventOnline #VirtualCyberCareerFair #OnlineCommunityForCybersecuritySpecialists #EthicalHackingCollaborationGroup #CybersecuritySkillSharingPlatform #InfosecNetworking #CyberJobs #RedTeamBlueTeam #SOCNetworking #GlobalCyberNetworking

Thu 7 May · 20:00< 50
SecurityMeetupFree

Shift Left! Security - der Threat Modeling Workshop

Puch bei Hallein, 🇦🇹 Austria

Sicherheit von Anfang an: Threat Modeling Workshop
Die Sicherheit von Webanwendungen ist ein entscheidender Faktor in der modernen Softwareentwicklung. In diesem praxisorientierten Workshop wenden wir die Methode des "Threat Modeling" auf reale Projekte an.

Wir nutzen dabei die Abschlussprojekte von MMT-Bachelorstudierenden als Fallstudien. In gemischten Teams aus Studierenden und erfahrenen Softwareentwickler*innen aus der Praxis identifizieren wir potenzielle Schwachstellen, analysieren Angriffsvektoren und entwickeln gemeinsam effektive Gegenmaßnahmen.

Da wir nur ein beschränkte Anzahl von Plätze haben ist eine Anmeldung unbedingt notwendig!

9:00

  • Welcome & Intro [⏱️ 10min]
  • Bedrohungsanalyse 101 [⏱️ 20 min]

short break
9:45

  • Project TEMPA - Aus den Fehlern von Tesla lernen (Martin Herfurt) - Martin präsentiert sein Security Forschungsprojekt zu Tesla PhoneKey [⏱️ 30 min]
    (Trailer: https://www.youtube.com/watch?v=eDbSzVTYqBY)
  • Bedrohungsanalyse mit STRIPED am Beispiel Tesla (Martin Herfurt) [⏱️ 15 min]

short break
10:45

  • Kurz-Vorstellung der MMT Projekte [⏱️ 30 min] (Studierende von MultiMediaTechnology)
  • Vorstellung des EoP-Kartenspiels (Martin Herfurt) [⏱️ 20 min]

=== Mittagspause, ca. 11:30 - 12:30 ====

12:30
Setup für die erste Runde: Bedrohungsanalyse mit "Elevation of Privilege" Kartenspiel [⏱️ 40 min]

short break
13:30
Setup für die zweite Runde: Bedrohungsanalyse mit "Elevation of Privilege" Kartenspiel [⏱️ 40 min]

14:10 Retrospective
14:20 End of Event

Fri 8 May · 07:00< 50
SecurityConferenceFree

Tech Talk: Cyber Security Essentials for Every Business

Tralee, 🇮🇪 Ireland

This event will provide clear, actionable insights to help organisations strengthen their cyber security posture and risk management.

Join us at SMBC Tralee Operations / JRI-America in Kerry Technology Park, on Tuesday 12 May from 12:00 – 14:00 for an engaging Tech Talk exploring the cyber security essentials every business should understand.

Registration, refreshments and networking will begin at 12:00, with panel discussions commencing at 12:30.

This session will be broken down into two panel discussions. The first will explore the importance of cyber security awareness and education, highlighting why building a strong security culture across organisations is critical. The second will focus on security essentials for businesses, outlining the practical steps organisations can take to strengthen their cyber defences.

Bringing together a panel of cyber security specialists and business leaders, this event will examine the real-world risks facing organisations across all sectors. Through practical discussion and shared experience, the panel will explore common cyber threats, the potential impact on operations and reputation, and the proactive measures businesses can take to improve resilience.

We are delighted to welcome a panel of industry experts who will share their knowledge, experience and practical insights.

This session will be facilitated by: Hazel Murray, Chair of Cybersecurity at MTU and expert panel speakers include:

Panel 1: Awareness and education

  • John Drury, Consultant Program Manager at Tech Industry Alliance Skillnet
  • Tom O’Connor, Director of the CyberSMART Security Awareness Program at SMBC Tralee Operations / JRI-America

Panel 2: Security Essentials for business

  • Damien Moran, Head of the Security Operations Centre at SMBC Tralee Operations / JRI-America
  • Paddy Lange, Co Founder at Resilium

This event is designed for both technical and non-technical audiences, this Tech Talk will provide clear, actionable insights to help organisations strengthen their cyber security posture and make more informed decisions around risk management.

Tue 12 May · 13:00 – 15:00
SecurityMeetupFreeOnline

Special: IT-Security

Dortmund, 🇩🇪 Germany

Um was geht es dieses mal?
Dieses Mal dreht sich alles um aktuelle Herausforderungen, Best Practices und Trends rund um IT-Sicherheit. Freut euch auf praxisnahe Einblicke, spannende Diskussionen und den Austausch mit Security-Expert:innen.

So leicht können Hacker Ihr Unternehmen über öffentliche Daten angreifen - Mehmet Avci (codecentric)
Jedes Unternehmen hinterlässt einen digitalen Fußabdruck – oft unbemerkt, aber öffentlich zugänglich. Genau diese frei verfügbaren Informationen machen sich Angreifer im Rahmen von Open Source Intelligence (OSINT) zunutze, um gezielte Angriffe vorzubereiten, ohne dabei technische Schutzmechanismen direkt angreifen zu müssen.

In diesem Talk wird gezeigt, wie einfach es für Angreifer ist, Unternehmen allein auf Basis öffentlich verfügbarer Daten zu analysieren und zu kompromittieren. Nach einer Einführung in die Grundlagen von OSINT und die typischen Phasen eines OSINT‑Prozesses werden verschiedene Techniken vorgestellt und eingeordnet. Dazu gehören unter anderem Subdomain‑Enumeration, Google Dorking, die Auswertung von Unternehmensinformationen, Social‑Media‑Analysen, das Sammeln von E‑Mail‑Adressen sowie die Nutzung von Datenlecks und Breach‑Daten.
Anhand praxisnaher Beispiele aus realen Szenarien wird verdeutlicht, wofür diese Techniken eingesetzt werden und wie Angreifer die gewonnenen Informationen miteinander kombinieren, um detaillierte Profile von Organisationen, Infrastrukturen und Mitarbeitenden zu erstellen. Der Vortrag schärft das Bewusstsein dafür, wie aus scheinbar harmlosen Einzeldaten ein ernstzunehmendes Sicherheitsrisiko entstehen kann – und warum OSINT ein zentraler Bestandteil moderner Angriffe ist.

This is fine - until it's not - Christian Uhsat (codecentric)
Was passiert, wenn was passiert? Erfahrungsberichte aus Digitaler Forensik und Incident Response im Kampf gegen Cybercrime, Ransomware und den allgemeinen Wahnsinn.

Hybrides Setup!
Wir freuen uns, euch bei uns in den Räumen der codecentric AG in Dortmund willkommen zu heißen. Vor Ort versorgen wir euch mit Snacks und Getränken und freuen uns gleichzeitig über interessante Diskussionen und einen guten Austausch. Für alle, die es nicht zu uns ins Office schaffen, werden wir das Meetup Hybrid durchführen. Der Stream beginnt ca. 10 Minuten später, damit wir vor Ort ausreichend Möglichkeit für persönliches Kennenlernen haben.
Den Live-Stream findet ihr auf dem YouTube-Channel der codecentric AG.

Wichtig - Absage bitte rechtzeitig:
Wir bestellen das Essen bereits 3 Tage vor dem Meetup. Falls ihr doch verhindert sein solltet, bitten wir euch um eine rechtzeitige Absage. Das ist wichtig, damit wir nicht unnötig Essen verschwenden müssen. Vielen Dank für euer Verständnis!

Anreise:
Per Zug: Vom Dortmunder HBF sind es ca. 10 Minuten zu Fuß.
Mit dem Auto: Rund um das Office gibt es einige Parkflächen, dazu befinden sich in dem Parkhaus der Thier-Galerie weitere Parkplätze.

Tue 12 May · 16:00< 50
SecurityMeetupFree

Digital Pulse by Jacobs - IT & OT Cybersecurity

🇵🇱 Poland

Digital Pulse is back🔥

Following a successful launch in January, we’re diving straight into IT & OT Cybersecurity. As digital and operational environments become increasingly interconnected from corporate networks to energy grids and manufacturing floors the need to secure both worlds is more critical than ever.

When OT is compromised, the impact goes beyond data. It can mean downtime, operational disruption, safety considerations, or compliance challenges.
Securing these environments while keeping everything running safely and reliably isn’t always straightforward and that’s exactly where the conversation begins.


📅May 14
📍Jacobs office, M. Konopnickiej 31, Kraków


🎤Agenda

18:00 Registration
Come in, grab a drink and catch the puls.
18:30 - 18:45 Welcome & introduction by Adam Jakubski

18:45 - 19:15 Deepfake, AI and the human factor: the latest threats and practical ways to protect against manipulation by Anna Pieczątkowska
AI is transforming social engineering, making deepfakes, voice cloning and AI-powered phishing faster, cheaper and more convincing than ever. This session explores how criminals use AI-enabled manipulation to exploit trust, influence employees and gain access to money, data or systems. Through real-world examples, we will look at practical ways to recognize warning signs, build stronger verification habits and train people beyond traditional IT-focused awareness. The session will show how organizations can manage human risk in the age of AI with clearer rules, smarter processes and a culture of digital trust, helping teams stay calm, curious and cyber sharp.

19:15 - 19:20 break

19:20 - 19:50 OT CYBERSECURITY GRC: A Practical Guide to Governing, Prioritizing, and Proving Security in Industrial Environments by Stephen Omowumi
Operational Technology is at a turning point, with rising cyber threats, AI-driven attacks and growing attention from regulators and business leaders making traditional, engineer-led approaches no longer enough. This session explores how Engineering, OT Cybersecurity and GRC come together as a sign of true OT maturity in 2026: Engineering owns reliability and safety, OT Cybersecurity defines protection, and GRC integrates cyber risk into the full OT risk lifecycle — from understanding and prioritizing risk to proving assurance. Drawing on work in Water, Power and Advanced Manufacturing, the session shows how GRC brings OT cyber risk into enterprise decision-making, enabling smarter investment, clearer accountability and long-term resilience.

19:50 - 20:05 Networking break

20:05 - 20:35 When Prevention Fails: Consequence‑Driven, Cyber‑Informed Engineering as the Last Line of Defense by Filip Szymanowski
Cybersecurity in OT and critical infrastructure cannot rely only on prevention and detection, as compromise is often a matter of when, not if. This session introduces Consequence‑Driven, Cyber‑Informed Engineering (CCE) as a practical, engineering‑focused framework for identifying high‑consequence scenarios, mapping cyber pathways to physical effects and designing controls that prevent or contain catastrophic outcomes - protecting people, operations, the environment and public trust even when cyber defenses fail.

20:35 - 20:40 Quiz with prizes
20:40 - 21:30 Networking
🍕 It's pizza time!

By signing up for this event you're accepting terms & conditions.


💡Speakers
Anna Pieczątkowska, cybersecurity professional, psychologist, AI enthusiast and founder of Cyber Aperitivo, where she makes the human side of cybersecurity and AI feel practical, sharp and surprisingly relatable. She explores how people make decisions under pressure, especially when trust is manipulated through social engineering, deepfakes, AI-enabled phishing and other emerging tactics. Her work helps technical and non-technical audiences understand human risk, build better security habits and stay cyber sharp in the age of AI.

Stephen Omowumi, OT Cybersecurity Senior GRC Analyst at Jacobs
Stephen has over 10 years of IT experience and 7 years in cybersecurity, with a focus on Governance, Risk and Compliance (GRC), cybersecurity auditing, risk management and regulatory compliance. He works with frameworks such as ISO/IEC 27001, NIST CSF, NIST RMF, MITRE ATT&CK, SOC 2, GDPR and IEC 62443. He also integrates AI considerations into cybersecurity practices to improve threat detection, automation and decision-making. His growing focus is OT cybersecurity in water systems, power and energy infrastructure and advanced manufacturing, where he applies GRC principles to strengthen resilience, safety and IT/OT convergence.

Filip Szymanowski, Senior OT Cybersecurity Engineer at Jacobs
Filip has over 13 years of experience in industrial automation, OT networks and cybersecurity. Strong background in designing, implementing, programming, integrating maintaining and troubleshooting control systems. In recent years, he has been working on securing critical infrastructure and bridging the gap between OT and IT.

Thu 14 May · 16:00< 50
SecurityConferenceFree

Cyber Expo & Conference Ireland 2026

Dún Laoghaire-Rathdown, 🇮🇪 Ireland

Renaissance, Ireland’s leading IT security distributor, is delighted to announce the return of Cyber Expo & Conference Ireland 2026!

Cyber Expo & Conference Ireland 2026

Ireland's largest cybersecurity gathering is back for its 9th year. Join us on 20th May 2026 at Leopardstown Pavilion, Dublin.

Whether you're an MSP looking to expand your security portfolio, an IT professional navigating compliance demands, or a business leader trying to make sense of the evolving threat landscape, this is your chance to connect with the people and solutions that can help.

What to expect

The day brings together cybersecurity vendors, channel partners, IT teams, and business decision-makers for a mix of practical learning and hands-on exploration. You'll hear from organisations who've implemented security and compliance solutions in the real world, with case studies that go beyond the theory. Our expert panels will tackle the challenges that matter most right now, from DORA and NIS2 compliance to protecting your business against increasingly sophisticated threats.

Between sessions, you'll have the opportunity to meet leading security vendors, see live demonstrations, and speak directly with specialists who can answer your specific questions. It's a rare chance to explore multiple solutions in one place and have genuine conversations about what would actually work for your organisation.

Who should attend

This event is designed for IT and security professionals, MSPs and resellers, and business leaders responsible for technology and risk decisions within Irish organisations. Whether you're from an SMB or a larger enterprise, if cybersecurity and compliance are on your agenda, you'll find value here.

Please note this is a business-focused event and is not suitable for students.

More details coming soon

We'll be announcing our full speaker lineup, exhibitor list, and session programme in the coming weeks. Register now to secure your place and be the first to hear updates.

Wed 20 May · 09:00 – 17:00
SecurityMeetupFree

52. OWASP Cologne @ REWE digital - Cloud Config Vulnerability Scoring System

Cologne, 🇩🇪 Germany

OWASP Köln ist wieder in den Räumlichkeiten von REWE digital am Standort Carlswerk in Köln-Mülheim zu Gast!
Die Veranstaltung beginnt um 19:00 Uhr, der Vortrag startet um 19:30 Uhr

Schwachstellen in der Cloud - Vorstellung des Cloud Configuration Vulnerability Scoring System (CCVSS) - Kai Schubert
Konfigurationsfehler sind die häufigste Ursache für Schwachstellen in der Cloud. Etablierte Standards sind für die Bewertung dieser Cloud-spezifischen Schwachstellen nur unzureichend geeignet. Beispielsweise sind die Auswirkungen der Ausnutzung eines Konfigurationsfehlers mit den Metriken etablierter Scoring Systeme nicht sinnvoll zu erfassen. Das neue Cloud Configuration Vulnerability Scoring System (CCVSS) liefert dafür eine Lösung: Die Metriken von CCVSS sind angepasst, beziehen die Umgebung mit ein und berücksichtigen die Effektivität mitigierender Maßnahmen. Neben der Vorstellung des CCVSS demonstrieren wir anhand konkreter Praxisbeispiele seine Anwendung.

🏢 Location:
REWE digital, Schanzenstraße 6-20, 51063 Köln, Building 2.20
Kostenlose Parkplätze stehen auf den „REWE digital“-Parkplätzen am Carlswerk rund um das Gebäude zur Verfügung.
🌈Alle Geschlechter und Altersgruppen sind herzlich willkommen!
Bei diesem Meetup sprechen wir (mindestens) Englisch und Deutsch.
Diese Veranstaltung findet ausschließlich vor Ort statt. Solltest du Anzeichen einer Erkrankung verspüren, ziehe bitte in Erwägung, diese Veranstaltung auszulassen und ein anderes Mal teilzunehmen. Wir werden in Zukunft noch viele weitere Meetups veranstalten.

Thu 21 May · 17:00< 50
SecurityMeetupFree

🕹️ SecTalks :: Hackers & Defenders of the "Cyber" Security Arena

Rotterdam, 🇳🇱 Netherlands

THEME:
Let's meet for an informative session where you can ask security experts any questions you have in your mind no mater how basic or advanced that is. Every month we try to have a different topic, and there's always time to discuss anything important to you as well!

FAQ:
▶️ The heck is SecTalks?
✔️ SecTalks meetups are about participating in information and cyber security discussions, learning from others, and improving problem-solving skills.

▶️ Where & When is this event? What?
✔️ Every LAST Thursday of the month 18:30 at CIC Rotterdam, (along the Venture Cafe / GHG drinks); SecTalks continues as usual & we still meet at the same place! Doors open at 17:30 - drinks and snacks provided!

▶️ I want to speak at your talk
✔️ Cool, message us here on Meetup.com and get in touch, or on twitter, or be creative!

▶️ Does it cost me something?
✔️ No.

▶️ Cool idea, I want to sponsor the event.
✔️ If you want to sponsor these sessions please get in touch via messages or on twitter with the organizers, Nicolas @nicolasnow

SecTalks takes place at the CIC innovation community - and part of the Venture Cafe Rotterdam gathering which is now (temporarily?) on halt.

Doors for SecTalks open at 17:30 we have drinks (and some snacks). SecTalks session starts at 18:30. If you are there earlier, drop a line so we can connect and socialize more.

Notes:
💡 Got feedback? DM here on Meetup.com or DM on twitter/X @nicolasnow or @xxByte

Thu 28 May · 16:30< 50