Cybersecurity & InfoSec Events in Europe

Cybersecurity / InfoSec conference in Munich, Germany

Cicada is an easy-difficult Windows machine that focuses on beginner Active Directory enumeration and exploitation. In this machine, players will enumerate the domain, identify users, navigate shares, uncover plaintext passwords stored in files, execute a password spray.

Join Egypt Azure Community for the second session in our Microsoft Intune series!
In this session, we’ll explore how Microsoft Intune Compliance Policies and Microsoft Entra Conditional Access work together to secure devices and control access to corporate resources.
What You'll Learn:

• Device Compliance Policies and security requirements.
• Configuring Conditional Access policies.
• Enforcing access based on device compliance.
• Live demos and troubleshooting common issues.

Prerequisite: Please watch Part 1 before attending this session.
🎥 Part 1 – Watch on YouTube: https://youtu.be/xYVzU7ZgMX0

Organized by Egypt Azure Community ☁️

Cybersecurity / InfoSec conference in Stuttgart, Germany

Artificial Intelligence (AI) conference in Berlin, Germany

📢 Important news: Meetup will be decommissioned at the end of the year, so RSVP will be moving to our OWASP Chapter page then. To stay updated on future events, join the chapter here:
🔗 https://owasp.org/chapters/stockholm

Join us for an exciting afterwork event in collaboration with Netlight. In attendance will be leaders from the OWASP Stockholm chapter, Netlight clients, security professionals from Stockholm and the OWASP Stockholm community!

Whether you're deep in the security world or just getting started, this is a chance to connect with the community, hear from practitioners working on real problems, and dig into topics that matter.

When? Monday, 9 November
Where? The Bistro, Netlight Office, Regeringsgatan 25 floor 11

The evening at a glance:
17:00 — Doors open. Dinner and drinks will be available. Come early, mingle, and meet the community.

18:00 — Talks kick off, each being ~30min, followed by a 15min Q&A and break:

• Splitting Secrets — Shamir's Secret Sharing and Zero-Knowledge Proofs, by Filip Nilsson - Security / Platform Engineering @Netlight
• Securing Autonomous Agents, by Kristian Alvarez Jörgensen - Security Architect @Netlight
• OWASP and the CRA: A good match, by Olle Johansson (Consultant, OWASP SBOM and CycloneDX project lead)

20:30 — DJ, drinks, snacks, and mingle!

So don't forget to sign up - spots are limited! - and join us for an evening of talks, good food, and great conversations!

🌟More about the talks:
Olle E. Johansson - OWASP and the CRA: A good match
In this talk Olle E. Johansson will update on the EU CRA legislation and talk about the toolchain and projects needed to manage vulnerabilities. The Cyber Resilience Act (CRA) aims to safeguard consumers and businesses buying software or hardware products with digital elements. The CRA entered into force on 10 December 2024. The main obligations introduced by the Act will apply from 11 December 2027, with reporting obligations to apply as of 11 September 2026. One of the focus areas is vulnerability management. To keep a product secure during its lifetime, all 3rd party components will have to be monitored and up to date. At the heart of this process is the Software Bill of Materials, SBOM, which is used to monitor for known vulnerabilities in both Open Source and commercial components. The talk will cover projects such as OWASP ECMA TC54 - PURL, CycloneDX, CLE and TEA that fit right in with CycloneDX working with various kinds of bill-of-materials for a long time.

Filip Nilsson - Splitting secrets: Shamir’s Secret Sharing and Zero-Knowledge Proofs
How can you share a secret without revealing it, or prove you know something without showing what it is? Through two hands-on hobby projects, Filip will explore the fascinating world of cryptography, demonstrating how Shamir’s Secret Sharing and Zero-Knowledge Proofs work in practice and how these seemingly magical concepts can solve real-world problems.

Kristian Alvarez Jörgensen - Securing autonomous agents
Organizations are rushing into incorporating autonomous agents into their day to day operations, but little consideration has generally gone into how those systems should be secured. Kristian will dive into the unique challenges that attempting to secure agents presents and explore what potential solutions and tools that exist.

About the speakers
Olle E. Johansson
Olle E. Johansson is a consultant in the area of realtime communication and in embedded system security. He has been active in Open Source for many years as a developer, evangelist, trainer and speaker in many conferences worldwide. Olle is a member of the OWASP SBOM Forum and the OWASP CycloneDX industry working group. He is currently working on the CycloneDX Transparency Exchange API standard. Olle is currently a project leader for the Swedish DNS TAPIR project that is building Open Source software for analysing DNS resolver logs and finding bad actors.

Filip Nilsson
Filip Nilsson is a Platform/Security Engineering Expert at Netlight, specializing within cloud and platform security.

Kristian Alvarez
Kristian Alvarez is a Security Architect at Netlight specializing in security architecture and resident threat modeling evangelist.

Titel: Agent Hijacking: Wie autonome KI zum Sicherheitsrisiko wird
Abstract:
Coding Agents wie Claude Code oder Cursor verändern die Softwareentwicklung. Doch was passiert, wenn Angreifer die Kontrolle über diese autonomen Helfer übernehmen?
Reale Cyberangriffe zeigen, wie KI-Agenten manipuliert werden können, um Sicherheitslücken auszunutzen, sensible Daten abzugreifen und ganze Angriffsketten selbstständig auszuführen.
Der Vortrag zeigt anhand aktueller Beispiele, wie Angriffe durch Prompt Injection, Memory Poisoning und Persona Engineering funktionieren und warum klassische Sicherheitskonzepte dabei an ihre Grenzen stoßen.
Vor allem aber geht es um die Frage: Wie lassen sich Coding Agents sicher einsetzen?
Mit konkreten Schutzmaßnahmen, bewährten Architekturansätzen und Empfehlungen für Entwicklungs- und Security-Teams.
Referent: Florian Rauls von Infinity Synaptics GmbH

Mehr über Florian und den Inhalt erfahrt ihr auf der Webseite: https://www.andrena.de/event/objektforum-ka-nov26

Agenda:
Montag, 9. November 2026
Beginn: 18:00 Uhr
19 Uhr: Networking und Austausch bei kostenlosen Getränken und Speisen
Ort: andrena objects ag | Schulungsraum im 4. OG | Albert-Nestler-Straße 30 | 76131 Karlsruhe

Begrenzte Teilnehmerzahl! Um Anmeldung auf der Webseite wird gebeten! Das Anmeldeformular findet ihr hier: https://www.andrena.de/event/objektforum-ka-nov26

Viele Grüße,
Phyllis

Back by popular demand! Put your knowledge to the test at a data privacy table quiz. "It's more fun than it sounds" - Quizzer, 2025

Think you know what the Internet knows about you?

Our quiz is back by popular demand! After a packed out quiz last year, we’re returning for one night only this year. Join us for a fun, social and eye-opening table quiz that'll put your knowledge of the hidden world of online tracking to the ultimate test.

Grapple with questions like:

• How long would it take to read all the terms & conditions the average internet user accepts in a year?
• What did RTÉ journalists get from a data broker, with surprising ease, last year?
• Which tech billionaire once killed a goat with a stun gun and served it cold to the boss of Twitter?

What to expect:

• Brain-teasing questions that reveal the hidden world of personal data.
• A fun, relaxed & social atmosphere - no tech expertise required!
• Prizes for the top team who prove they're the true privacy champions.

Whether you're a privacy novice or a seasoned security pro, you'll learn something new, have a great Monday night out and leave with a better understanding of how to be more in control of your digital life.

Grab your friends, form a team (or join one when you arrive!), and let's play "Who Do THEY Think You Are?"

Date: Monday, 9 November

Time: doors at 19.00; quiz starts at 19.30

Location: Lucky's, 78 Meath Street, Dublin 8

Who do THEY think you are? is led by Wove Design, with ADAPT Centre, Beta Festival and NCAD as partners.

¡Dos charlas, grandes experiencias y muchas razones para encontrarnos!
Este lunes 9 de noviembre nos reuniremos para aprender, compartir y seguir construyendo comunidad AWS. 🚀

🔐 Investigación forense en Windows con IA y AWS
Con Jorge Mario Rodríguez, Sr. Security Consultant en AWS Professional Services. Una sesión práctica para explorar la investigación forense digital apoyada en IA y AWS.

💜 Síndrome del Impostor
Una conversación cercana sobre confianza, desafíos y crecimiento profesional con:

• Sary Libreros: Líder de AWS Tech Girls y Cloud Architect Consultant en Strata Analytics.
• Claudia Izquierdo: Sr. Solutions Architect en AWS.
• Zully Romero: Cofundadora y líder de AWS User Group Security Colombia y Líder de Arquitectura de Solución en Bancolombia.

🐆 ¡Y tenemos algo más que celebrar!
Presentaremos oficialmente nuestro nuevo logo: el jaguar colombiano, símbolo de fuerza, protección y de nuestra identidad como comunidad de seguridad.

Al final… ¡compartiremos, tendremos premios y una actividad muy especial que no te querrás perder!

📅 Lunes 9 de noviembre de 2026 - 6:00 PM (hora Colombia)

🏢 Presencial: Oficinas AWS Bogotá, Torre Empresarial Pacific, Calle 110 #9-25, Piso 14. Inscríbete en el formulario de este meetup
💻 Virtual: transmisión por YouTube: https://www.youtube.com/watch?v=86OEFnbpADw

Inscripciones presenciales hasta el 5 de noviembre. ¡Cupos limitados!

Cybersecurity / InfoSec conference Online

Join us on Tuesday, November 10th for another engaging JUG Noord meetup in Groningen, where we’ll explore how Kotlin can take Spring Boot development to the next level and uncover the security risks, vulnerabilities, and challenges that come with integrating LLMs into modern applications.

📅 Date & Time:
Venue opens: 16:30
First talk starts: 17:00
Food & drinks: Provided between the sessions

📍 Location: Kempkensberg 12, Groningen

🚨 Important: Signing up and valid identification are mandatory for entry. If the name on your Meetup profile does not match your ID, please contact Martijn (organizer) with your full name.

🇬🇧 Things you can do with Spring Boot and Kotlin by Frederik Pietzko (JetBrains)
In this talk, I’ll show you how to build microservices efficiently using Kotlin and Spring Boot.

We’ll begin by exploring Kotlin as a drop-in replacement for Java and gradually dive into Kotlin-specific features and libraries that significantly enhance development. We’ll also take a closer look at Kotlin DSLs for Spring Beans, Routing and Security as a sleek alternative to annotation-based configurations, essentially turning Spring Boot into a microframework.

Come and join me on this live coding adventure!

You will leave knowing how to turn any "could I automate this?" moment into a working optimization solution.

🇬🇧 The S in LLM stands for Security by Ties van de Ven (Alliander)
LLMs are all the rage these days and are increasingly being added to more and more products. At the same time we see companies using GenAI to assist or even replace software engineers. But as with any new technology this also brings risks that we need to be aware of in order to use it properly. Since GenAI is still an evolving field, new attacks and vulnerabilities are regularly discovered.

Join this session in which Ties van de Ven explores the most common use cases for LLMs (code assistance/agentic flow, applications built around LLMs, MCP, and model selection) and discusses possible attacks, exploits and mitigations.

About the speakers
Frederik is a Developer Advocate at JetBrains, passionate about building the best possible products, and regularly presents at international conferences and writes the occasional blog post.

In his free time, he likes to explore programming languages and frameworks, meet and chat with other software enthusiasts, and play with his cats.

Ties is a software engineer with passion for concepts, sofware engineering fundamentals and helping others. He combines these passions by doing public speaking, volenteer work for organisations like Devoxx4kids and codingcoach and working as a Software Quality Expert at Alliander.

Време е и за ноемврийското ни събитие. #52 Cyber Security Talks Bulgaria е готов и ще ни представи отново актуални теми и възможност за дискусии.

Партньор и съорганизатор e „Сиском Инженеринг“, които за пореден път подкрепят общността ни.
Сиском Инженеринг е български ИКТ системен интегратор с 18 години опит в изграждането и защитата на сложни технологични среди за бизнеса и публичния сектор. Компанията работи в областите на инфраструктурата, свързаността, дигитализацията и сигурността. Управлява целия процес от анализа и проектирането до внедряването и поддръжката, с ангажимент към надеждната работа на системите във времето.

Темите на #52 Cyber Security Talks Bulgaria са:

1. Shadow AI и AI агенти: Как да се поставим изкуствения интелект под контрол + Демо - Анжела Дамянова
2. Seeing Purple: A Live Red-Blue Collaboration Exercise - Петър Джалалиев и Димо Станков

Всеки от гостите на събитието ще получи и 2 CPE точки от ISACA Sofia Chapter . /Моля, отбележете желанието си при регистрациятана събитието./

Следете страниците в социалните мрежи и канала ни в Discord, за да научавате повече:

• LinkedIn: https://www.linkedin.com/company/cyber-security-talks-bulgaria
• Meetup: https://www.meetup.com/Cyber-Security-Talks-Bulgaria-Meetup-Group/
• Facebook: https://www.facebook.com/profile.php?id=61588273361718
• Instagram: https://www.instagram.com/cybersecuritytalksbg/
• Discord: https://discord.gg/MPMAgmCbWs (#cybersec-talks)
• Website : https://www.cybersecuritytalks.bg/

Running since June 2013, every month we have 1-2 talks focused on Security or Technology - followed by socialising with like minded people

• You can find out exactly what to expect about the night and the venue on the What We're About section of our Meetup page. Past talk details can be found the "Past Events" section.
• All people with any sort of an interest or level of knowledge in Security, Hacking and Emerging Technology are more than welcome to attend and feel free to bring like minded colleagues and friends.

CorkSec is made possible through generous sponsorship from our Platinum Sponsor TrendAI, Gold Sponsor CyberSkills , as well as our Silver and Bronze Sponsors featured prominently on the night.

Our talks come from our community so if you have an idea for a topic (anything for 10-60 minutes) please email us at DefconCork@gmail.com . Whether you are an experienced presenter, or presenting for your first time - CorkSec is a great venue for it - and we are happy to help you prepare and mentor you.

Doors open at 19:00 with talks starting at 19:15. Talks below

TALK 1: Airgapped System | Not a problem. Lessons Developing Malware for a NATO Exercise by Sabastian Hague
Step inside the development process behind Exercise Locked Shields 2026, the largest and most complex cyber live-fire exercise in the world
Centri had the honour of supporting Locked Shields by developing realistic technical content for some of the most capable cyber operators globally. This session explores the challenge of building scenarios that are credible, relevant, and difficult enough to test defenders operating at enterprise and nation-state level.
You’ll hear how we approached the design of advanced exercise content, the considerations involved in developing realistic adversary behaviour, and how we balanced technical depth, safety, and learning value.
The session will also walk through one of the more intricate malware components developed for the exercise. Rather than relying on obvious destructive behaviour, this tooling was designed around specific operational objectives, showing how subtle functionality can be harder for commercial detection tooling to identify.
Can malware be effective without being noisy? Can highly specific functionality create a bigger detection challenge than overtly malicious behaviour?
Join us and find out.

TALK 2: Adopting AI for Threat Defense: What Actually Works (and What’s Still Hype) by Saurabh Khadtare
A lot of people in security are understandably skeptical of “AI” right now. Marketing slides promise fully autonomous SOC's, while real defenders are still drowning in huge alerts and brittle detection logic. At the same time, attackers are already using automation and AI‑adjacent tooling to scale phishing, brute forcing, credential abuse, and exploitation, so a purely manual defensive approach is becoming unrealistic.
In this talk, I’ll share practical lessons from working as a security engineer and Pentester on how AI is actually starting to help with threat defense, and where it absolutely should not be trusted on its own. I’ll break “AI for defense” into three buckets: classical ML/UEBA and anomaly detection, AI‑powered SOC automation for triage and noise reduction, and LLM‑based that help with summarizing incidents, writing queries/rules, and translating technical findings for non‑technical stakeholders. For each bucket, I’ll walk through concrete workflows and examples (using redacted or synthetic data) showing what sucked before, what AI does better, and what still needs a human in the loop.
I’ll also cover the major limitations and risks: hallucinations, weak multi‑step reasoning, prompt injection, and new attack surfaces introduced by LLMs and vendor tools. The goal is to give the audience a realistic blueprint for where AI can safely augment defenders today, and where “AI‑only” approaches are still pure hype.

We will also have a seat for the CPTA | Certified Penetration Testing Associate to give away on the night

Secure By Design - A Presentation by CISA

This presentation introduces Secure by Design, an approach that makes security a core requirement throughout the technology lifecycle. It examines how insecure software shifts the costs of hardening, patching, and incident response to customers.

Drawing on CISA and international guidance, the session outlines secure defaults, proactive engineering, transparency, and executive accountability. It also considers how recent advances in computing are accelerating vulnerability discovery and exploitation, increasing the need for manufacturers to reduce risk at its source.

What to Expect

• This month's meetup is online-only
• Introductions and Updates on chapter events
• Primary presentation

(* OWASP does not endorse or recommend commercial products or services, allowing our community to remain vendor neutral with the collective wisdom of the best minds in software security)

Event Details
📍 This is an Online meetup only. Please RSVP to see the event link.
🗓 Date/Time: November 10, 2026 / 6:00pm CST

Who Should Attend

• Software engineers and developers
• Application & Security professionals
• IT leaders and managers
• Anyone with an interest in application security topics

About OWASP
The Open Worldwide Application Security Project (OWASP) is a nonprofit foundation dedicated to improving the security of software. Local chapters provide opportunities to learn, network, and collaborate with others in the field.

Come to learn more and participate in OWASP Saint Louis - your voice will continue to help shape what OWASP Saint Louis becomes next.

Cybersecurity / InfoSec conference in Demanovska Dolina, Slovakia

• How to build a defensible evidence trail
• Ways to simplify audit preparation
• How to identify and address compliance gaps
• Best practices for continuous audit readiness

Keine Narrenfreiheit 2.0 – Angreifer rüsten auf. Wir auch?

Nach dem Auftakt im vergangenen Jahr geht „Keine Narrenfreiheit für Angreifer“ in die zweite Runde. Während 2025 die Frage im Mittelpunkt stand, wie Plattformen NIS-2-fit und widerstandsfähiger werden, schauen wir dieses Jahr einen Schritt weiter: Wie verändert KI die Bedrohungslage – und wie müssen Security-Strategien darauf reagieren?

In kompakten Impulsvorträgen geht es um aktuelle Angriffsvektoren im KI-Zeitalter, Agentic Runtime Security, automatisiertes Vulnerability Management und modernes Secrets Management. Anschließend bringen wir die Perspektiven der Teilnehmer:innen in einer gemeinsamen Panel-Diskussion auf die Bühne. Zum Abschluss bleibt Zeit für Networking und den direkten Austausch mit unseren Expert:innen.

Join us at the IRISSCERT Annual Cybercrime Conference 2026 for a day of networking, and expert insights into tackling cybercrime

IRISSCERT holds an annual conference is an all day conference providing attendees with an overview of the current cyber threats facing businesses in Ireland and what they can do to deal with those threats.

Experts on various aspects of cyber crime and cyber security share their thoughts and experiences with attendees, while a the day is a great opportunity to network with other professionals .

The conference will be open to anyone with the responsibility for securing their business information assets. There is a nominal fee of €50 per person attending to cover the costs of catering and other organisational expenses.

This year's speakers will be confirmed and announced over the coming weeks.

COVID 19 GUIDELINES

The event will be run in line with the current government guidelines regarding the hosting of indoor events.

We recommend people wear masks, ideally FFP2 and N95 masks, when attending the event, in particular when moving in common areas and within the conference hall. In addition, we strongly encourage attendees to be up to date with the relevant vaccinations and we ask that attendees conduct a rapid antigen test (RAT) before attending IRISSCON.

The Aviva facilities have been selected due to its modern air conditiona and air filtration systems.

We appreciate everyone's support to keep all attendees safe.

ACCOMODATION

We have also negotiated a special delegate rate for those wishing to stay in the conference hotel, which is the Clayton Hotel Burlington. If you wish to avail of this send an email to info@iriss.ie to get the discount code.

As AI adoption accelerates, protecting sensitive data across apps, cloud environments, and AI agents is more critical than ever.

Discover how Microsoft Purview can help you take control of enterprise data in our upcoming LIVE Masterclass: From Data Exposure to Control – Securing AI, Apps & Agents with Microsoft Purview.

What You'll Explore:

• Identify and reduce sensitive data exposure.
• Secure AI, apps, and agents with Microsoft Purview.
• Strengthen data governance and compliance.
• Gain better visibility and control over enterprise data.

Event Details:
Date: Wednesday, November 11, 2026
Time: 12:00 PM EST
Duration: 120 Minutes
Register Here

Don't wait for a data breach to rethink your security strategy.

Secure your spot today!

No te pierdas a Pedro Candel y German Sánchez compartiendo sus mejores trucos y anécdotas con pruebas de concepto de hacking en directo.

Step into the digital future with confidence. Learn valuable new skills and explore exciting technologies.

West Limerick Resources together with Match Marketing are offering a series of Digital Skills and AI Workshops, both in person and online. Reserve your spot now!!!

Workshop 4 of 9:

• Set up and use two-factor authentication. 
• Access Government services securely using MyGovID. 
• Complete common online public service transactions. 
• Understand how to keep personal accounts secure. 
• Build confidence in using digital public services independently.

Every path we've walked this fall ends up in the same room: the one where somebody decides what a company spends on security, which risks it accepts, and how to explain all of it to people who don't speak cyber. That's the CISO's job.

A vCISO, or virtual CISO, does that job for companies that don't have or don't need a full-time one.

It's Veterans Day, which fits. Tyrone enlisted in the Army in February 1996, has spent the 30 years since in IT and cybersecurity, and today runs a vCISO practice. Tonight he walks you through that road and what the job really looks like once you get there.

To everyone who served: thank you.

This one is network-wide. HQ in the DMV, Atlanta, and South Florida on the same call.

🎯 What We'll Cover
- What a CISO and a vCISO actually do, and how the two jobs differ
- The first 90 days with a new client: the assessment, the risk register, and the first report to leadership
- Translating risk for people who don't speak cyber
- How to get there from wherever you're starting, and the certs that matter (CISSP, CISM)

Hosted by Tyrone E. Wilson, founder of Cover6 Solutions, 30 years in IT and cybersecurity.

📺 Watch live on YouTube: https://youtu.be/stPyRMbLPko
📝 Get a head start: read the companion article on our blog before the session: https://www.cover6solutions.com/vciso-pathway/

🧭 Find your path
- Not sure where you're starting from? Take the free career path assessment: https://www.cover6solutions.com/career-path/
- Prep for the certs on this path:
• CISSP: https://www.cover6solutions.com/product/isc2-cissp-practice-exam/
• CISM: https://www.cover6solutions.com/product/isaca-cism-practice-exam/
- Browse every Cover6 course: https://www.cover6solutions.com/courses/

📬 Get The 6, our free cybersecurity career newsletter: https://www.cover6solutions.com/the6/
🔗 Every Cover6 link in one place: https://www.cover6solutions.com/links/

🎤 Want to speak at a future meetup? Give a talk or demo, or sit down for a live interview with Tyrone. Apply anytime (first-timers get a coach): https://sessionize.com/cover6community
Rep the community → https://www.cover6solutions.com/product/cover6-shield-unisex-t-shirt/
Grab a Cover6 Shield tee and show up repping the community that helped get you here.

🤝 Hiring entry-level security talent, or want your brand in front of people building into this field? Sponsorship and hiring conversations start at info@cover6solutions.com

Cybersecurity / InfoSec conference in Stockholm, Sweden

Building confidence, resilience and cyber safety skills for children in 3rd-6th class. Think smart. Stay safe online.

In today's digital world, children need more than cyber safety skills. They need confidence, resilience and good judgment. This interactive workshop for 3rd to 6th class pupils teaches children how their thoughts and emotions can influence online behaviour, while also covering key online safety topics such as social media, gaming, passwords and smart device security. Children will leave with practical tools to help them think critically, stay safe online and make positive choices. Delivered by Think Smart Cyber.

Az IT-biztonság ma már nem egy pipa a feladatlista végén, hanem a stabil és biztonságos működés alapköve. A gyorsan változó fenyegetések, az AI-alapú támadások és a komplex rendszerek korában hogyan építhetünk valóban ellenálló architektúrát? A BeerUP Cybersecurity Edition-ön a kiberbiztonság legégetőbb kihívásait és gyakorlati megoldásait tesszük terítékre.
Vár egy igazi szakmai közösségi élmény: tapasztalt előadók, valódi esettanulmányok. A szünetekben és az előadások után pedig egy-egy kézműves sör mellett kötetlenül átbeszélheted a hallottakat, a szakértő kollégákkal és az esemény résztvevőivel.

Az esemény programja:
18:00 – 18:25
Horti Máté (ViVeTech Nyrt.)
EOL rendszerek: Sérülékenységek nyomában
Kulcstémák: RidgeBot, Droplet, elavult rendszerek sérülékenységvizsgálata

18:25 – 18:50
Papp Dávid (Gen0Sec)
Az első ismert HumanAId támadás
Kulcstémák: Ágensalapú AI, Jailbreak és perzisztens kontextus, Apache Struts, Zimbra és GeoServer exploitáció, MITRE ATT&CK, Gépi sebességű védekezés (EDR, NDR)

18:50 – 19:15
Niall Browne (AIBound) & Lex Moon & Justine Cross (EMEA Channels)
From the Front Lines: A Five-Time CISO’s 5 Lessons – and How AI Rewrites the Rules [EN]
Key topics: AI-Powered Cyber Threats, Autonomous AI Agents, Identity Security, AI Supply Chain Attacks, AI Governance & Incident Response

19:15 – 19:40
Sárréti Zsombor & Kovács Gábor (CDSYS Nyrt.)
Identity Debt – a jogosultságkezelés hiánya
Kulcstémák: Identity Debt, Jogosultságkezelés (IDM), Személy és fiók életciklus kezelése, Felülvizsgálatok, Phishing, Just In Time Access (JIT)

19:40 – 20:05
Hlavaty Győző (Magyar Telekom)
És mit adott nekünk a kiberhírszerzés? CTI a gyakorlatban – az IOC-kon és a drága előfizetéseken túl
Kulcstémák: Cyber Threat Intelligence (CTI), SOCaaS, Incidenskezelés, IOC-k, EDR és NDR integráció

20:05 – 20:30
Rostás Krisztina (CDSYS Nyrt.)
Kínai gyártó, nyugati mércével: mit tud a Sangfor, és hol van a helye?
Kulcstémák: Sangfor, Next Generation Firewall (NGFW), Hyperconverged Infrastructure (HCI), hálózatbiztonság, vendor-kockázatok és alternatívák

20:30-tól
Networking & BeerUP (kötetlen szakmai eszmecsere, sörözés)

🗓 Időpont: 2026. november 12. | 18:00
📍 Helyszín: Városmajori Szalonka

📩 Az esemény ingyenes, de regisztrációhoz kötött: https://digitalk.tech/events/beerup-cybersecurity-edition
Hívd el a kollégáidat a saját regisztrációs kódoddal a BeerUP-ra, és a helyszínen extra sörkuponnal jutalmazunk!🍻

How do you actually get into cybersecurity?
What should you learn first? Do you need a degree or certifications? How do you get experience when even junior roles ask for experience? And once you get that first job, what does working in cybersecurity really look like?

For our next OWASP Belfast meetup, we’re bringing together three people at very different stages of the cybersecurity journey:
• A student currently learning cybersecurity and thinking about their first career steps
• A penetration tester who has already made the move into the industry
• An experienced security engineer with a background across engineering, education and the cybersecurity community

This will not be three presentations or a traditional panel.
Instead, we’ll have an open, interview-style conversation comparing expectations with reality and looking at cybersecurity careers from different points along the journey.

We’ll discuss topics including:
• Where to start when cybersecurity feels overwhelmingly broad
• Degrees, certifications, labs and practical experience
• Getting the first cybersecurity job
• What employers actually look for in junior candidates
• What penetration testing and security engineering really look like day to day
• Choosing a specialism — or not choosing one too early
• AI and how it may change entry-level cybersecurity careers
• Building a career that lasts
• The role of communities such as OWASP and BSides

The student will also get the opportunity to challenge the professionals: does the career advice we often give newcomers actually work in practice?
There will be plenty of time for audience questions and discussion, so whether you are a student, looking to move into cybersecurity, already working in the industry, or simply interested in how cybersecurity careers develop, come along and join the conversation.

Everyone is welcome.

Le groupe WEHW Toulouse rassemble des personnes intéressées par le "Ethical Hacking" et la sécurité informatique de façon générale.

Il abrite un espace d’échange (sous forme d'une liste de discussion) et propose un rendez-vous mensuel.
Sa première vocation est de permettre aux professionnels, aux étudiants et à tous les passionnés en général d'échanger et de s'enrichir mutuellement de leurs expériences et de leurs compétences.
La démarche est respectueuse et l'adhésion est soumise à validation et signature d'une charte déontologique.

Pour avoir toutes les informations, rejoignez-nous sur Discord !
https://discord.gg/pDunje3tpb
Vous pouvez aussi retrouver nos ateliers sur GitHub :
https://github.com/wocsa/WOCSA_Ethical_Hacking_Workshop

Vous avez des suggestions ? C'est par ici :
https://forms.office.com/Pages/ResponsePage.aspx?id=r4I4q_rNFEqbJn05fBiMDF80VWrKMtJAsIUZicYsOp9UMjdZVDdNMEs3NDdPNDVFOEdNV05FOElKVy4u

This year's theme has clearly been all about returning, as we're back at Microsoft Portugal's headquarters for our final event of the year. And we're pulling double duty, as this event also marks our fourth anniversary 🎉

We have two talks lined up for you, which we hope you'll enjoy. And please, don't ignore our feedback emails afterwards. We promise they're legitimate 🥺

Also, the cake is not a lie 🎂

Considering this chapter rose from the ashes in November 2022, hosting 15 events in four years is a pretty decent average ⏱️

This OWASP Lisboa chapter meetup will take place on November 12th, 2026, at 18:30, with the support of Microsoft Portugal and AP2SI 🤝🏻

The venue is the Microsoft Portugal office. Big building, Microsoft logo, can't miss it 🧭

Our tentative schedule:
18:40 - Quick intro by the OWASP Lisboa chapter leadership team
18:50 - “From Image Poisoning to Cluster Compromise: Attacking Docker and Kubernetes” by Sergey Chubarov
19:30 - "Your Adversaries Already Know Your Detection Gaps. Do You?" by Francisco Medeiros
20:00 - Food & Drinks, courtesy of Microsoft Portugal

Although the activities may start later, please try to arrive by 18:00 to allow ample time to settle in ⌚

--------------------------
Talks:
--------------------------
Title: From Image Poisoning to Cluster Compromise: Attacking Docker and Kubernetes

Speaker: Sergey Chubarov

Abstract: A single malicious container image can be enough to compromise an entire cloud-native environment.

This session explores how red teams and threat actors abuse the container supply chain to gain initial access, evade detection, establish persistence, and compromise Kubernetes clusters. Through live demonstrations, we will show how seemingly legitimate Docker and Kubernetes images can be weaponized to execute malicious code, steal secrets, deploy backdoors, and provide a foothold inside production environments.

Attendees will gain a practical understanding of modern container attack techniques and learn how to defend Docker and Kubernetes environments against supply chain threats.

Bio: Sergey Chubarov is a cloud security consultant, red teamer, Microsoft MVP, and Microsoft Certified Trainer with more than 15 years of experience in cybersecurity. His work spans offensive security, cloud security, and AI, helping organizations identify and mitigate real-world threats.

He is a frequent speaker at Black Hat, DEF CON, Hacker Halted, Wild West Hackin' Fest, and other international conferences. Sergey is known for highly practical sessions featuring live demonstrations, real attack scenarios, and actionable defensive guidance.

👉🏻 https://www.linkedin.com/in/schubarov/

--------------------------

Title: Your Adversaries Already Know Your Detection Gaps. Do You?
Speaker: Francisco Medeiros
Abstract: Security teams invest heavily in SIEMs, EDRs, XDRs, threat intelligence, and other defensive technologies. Yet detection gaps remain, and adversaries continuously adapt their techniques to evade the security controls we rely on.

But what if some of the most valuable insights for improving our detection coverage are already sitting in our own environments?
Every incident, penetration test, threat intelligence report, and newly disclosed vulnerability offers an opportunity to understand what we can detect, what we're missing, and how we can improve.

In this talk, we'll explore a practical approach to continuous detection engineering, turning real-world evidence into meaningful improvements in detection coverage.

We'll look at how to:
- Translate newly disclosed vulnerabilities and threat intelligence into actionable detection hypotheses, rather than waiting for vendor-provided content.
- Use penetration testing and purple teaming to identify blind spots, validate existing detections, and continuously improve coverage.
- Reconstruct incident timelines to uncover missed opportunities for earlier detection.
- Analyse available telemetry, validate techniques in controlled environments, and assess existing vendor and custom detection capabilities.
- Balance detection specificity, coverage, and false positives to develop resilient detections that remain operationally useful.

Through practical examples, we'll examine how offensive techniques can expose gaps in widely deployed security products, and how collaboration between offensive and defensive teams can turn those findings into stronger detection capabilities.

The goal isn't to walk away with another collection of detection rules to copy. It's to leave with a repeatable, vendor-neutral framework for continuously learning from the evidence already available to us, challenging our assumptions, and making better detection engineering decisions.

Because the question isn't just whether your adversaries know your detection gaps. It's whether you do, too.

Bio: Francisco Medeiros is a Threat Hunting Professional at Siemens, with over eight years of experience in cybersecurity, specialising in threat hunting, detection engineering, incident response, and purple teaming.
His work focuses on identifying gaps in detection coverage, understanding adversary techniques, and improving defensive capabilities through continuous testing and collaboration between offensive and defensive security teams.

Francisco holds GIAC GCFA and GPEN certifications and enjoys sharing his experience and insights with the cybersecurity community.

👉🏻 https://www.linkedin.com/in/francisco4fonso/

Two talks on keeping your Umbraco site secure and your publishing on autopilot!

Our next meetup brings together two practical talks from the Umbraco community: one on stopping stolen logins at the door, and one on automating your content publishing with Umbraco.Automate.

The Talks:

“Correct Creds, Wrong Person: Stopping Stolen Logins at the Umbraco Door”
Dave Bullough

Stolen creds are cheap, and they work. See how infostealers harvest them, and how a privacy-preserving Umbraco plugin blocks them at login without your server ever sharing them.

“Automation for the People”
Owain Williams

“It’s the end of manual posting as we know it.” Every blog post published, every platform notified, no copy-pasting. Owain dives into Umbraco.Automate and shows how custom Triggers and Actions can push your blog content to Mastodon, Bluesky, and LinkedIn the moment it goes live, with conditional workflows built in the Umbraco 17 backoffice.

Who Should Attend:
Developers, architects, and anyone responsible for an Umbraco site. Whether you’re thinking about login security, want to reduce manual admin, or are simply curious about what Umbraco can automate, there’s something practical for you.

What to Expect:

• Two practical talks from Umbraco community members
• Real patterns from working implementations
• Q&A and discussion
• Food and refreshments

Agenda:
18:30 - Mingling + Food
19:00 - Introductions & Umbraco news
19:15 - Talks
20:15 - Open Social + Networking

📅 Thursday, 12th November | 6:30 PM
📍 MSQ DX, Leeds