Brainberg

Tech Events in Gothenburg

Upcoming tech events in Gothenburg, Sweden.

Upcoming events in Gothenburg

Software EngineeringMeetupFree

Dead on Arrival: The Detection That Physically Can Not Fire - Detection Engineer

Gothenburg, 🇸🇪 Sweden

Dead on Arrival: The Detections That Physically Cannot Fire / Detection Engineering

đź’«Grab your ticket and secure your spot:
Registration Link for Full day Event
** 🦄 This is low cost and budget friendly and paid... **

A detection rule can sit in your repo, pass CI, and glow green on your ATT&CK coverage map while being physically incapable of firing. Not misconfigured. Incapable. It reads a log field that nobody collects, so no event will ever match it, and nothing on your dashboard tells you.

This is one of the most common silent failures in a real detection stack, and it is the one nobody owns. Coverage maps measure whether a rule was written, not whether it can fire. SIEM rule-health checks confirm a rule ran without error, and a rule running over data that never contains the field it needs runs without error too. It just runs over nothing. The gap between "quiet" and "dead" is invisible.

I built a small, read-only checker that closes that gap deterministically. It takes your Sigma rules, resolves the fields each one needs through your normal pySigma pipeline, and asks your SIEM's schema whether those fields are actually present, using metadata APIs like Elastic field_caps.

There is no matching, no scoring, no model: a field exists or it does not, so a rule can fire or it cannot. The verdict is FIREABLE or DEAD-ON-ARRIVAL with the exact missing field.

đź’«Grab your ticket and secure your spot:
Registration Link - Full Day Event

This is low cost and budget friendly events.

Fri 23 Oct · 08:00< 50
Software EngineeringMeetupFree

Real world Incident Response Lessons How Attacker Reach out OT. Grab Ticket

Gothenburg, 🇸🇪 Sweden

From IT to OT: Real-World Incident Response Lessons on How Attackers Reach Operational Technology Environments

đź’«Grab your ticket and secure your spot:
Registration Link for Full day Event

**🦄 This is low cost and budget friendly and paid... **

Operational Technology (OT) environments are often seen as isolated and separate from IT. In reality, they are increasingly connected through remote access, suppliers, shared infrastructure, virtualization platforms, and enterprise IT systems, creating attack paths adversaries can exploit.

This session is based on hands-on incident response experience and explores how attacks against OT environments actually begin. Instead of focusing on theory, it highlights real-world ways attackers move from IT into OT by abusing remote access, supplier connectivity, shared services, and modern infrastructure dependencies.

A key focus is the growing risk introduced by virtualization platforms such as VMware, which often support critical OT functions including engineering workstations, management systems, and historians. When these platforms are compromised, the impact can quickly become operational.

Attendees will gain practical insight into common attack paths, why IT compromise can become an OT risk, and what defenders should prioritize to improve detection, segmentation, and resilience across hybrid IT/OT environments.

✨️Grab your ticket and Secure your spots.
Ticket Registration - Full day Event

That is Paid and Budget Friendly Ticket.

Fri 23 Oct · 09:00< 50
AI Integration & ApplicationMeetupFree

The Robot's Credentials: Attacking the AI Platform Behind the Device-Get Ticket

Gothenburg, 🇸🇪 Sweden

The Robot's Credentials: Attacking the AI Platform Behind the Device

đź’«Grab your ticket and secure your spot:
Registration Link For Full Day Event

🦄 This is low cost and budget friendly and paid events.

Mikael Eriksson:
Consumer robots are arriving on our networks with something IoT devices typically don't have: a persistent cloud identity with write access to the owner's repositories, tied directly to an AI platform ecosystem. That changes what a compromise actually meant.

During my research into one of the consumer-accessible robots on the market, I found four attack paths. Two are what you'd expect from a device on a local network. Unauthenticated RCE, a desktop proxy deliberately designed to bypass browser Private Network Access restrictions. The vendor patched those. When I went through that patch, I found the other two were already there untouched by the security release, and in one case made newly relevant by the patch itself.

A malicious HuggingFace Space with a build hook exfiltrates the robot's stored OAuth token before the install even completes. A second unauthenticated endpoint replaces the stored token entirely in three HTTP requests. The robot's cloud identity is now the attacker's, persistent across reboots, and the victim's HuggingFace repositories are exposed alongside the robot itself.

The techniques are familiar. The composition is new: local daemon, desktop proxy, package build pipeline, cloud relay, stored OAuth token, and repository permissions are all part of one control plane. A breach here is not contained to the device.

Attendees leave able to evaluate any cloud-connected robot on their network and the risk they introduce.

The token replacement is not the end state. An attacker with the robot's cloud identity can substitute the model it runs. Silent and persistent across reboots, the compromise survives the attacker's exit. The device continues functioning normally, except what it thinks is no longer the users model.

đź’«Grab your ticket and secure your spot:
Registration Link For Full Day Event

Registration Link For Full Day Event
This is low cost and budget friendly events.

Fri 23 Oct · 11:00< 50
AI Integration & ApplicationMeetupFree

FinOps for AI: Cost per Task, Not Cost per Token

Gothenburg, 🇸🇪 Sweden

Registration
Only registrations through the link, not on Meetup. Register here: https://gdg.community.dev/events/details/google-gdg-west-sweden-presents-finops-for-ai-cost-per-task-not-cost-per-token/

Your CFO asks if the AI spending is paying off. “I think so” won’t cut it.

Gartner expects 40% of agentic AI projects to be cancelled by 2027 because their return on investment can’t be defined. Most teams can see their token spend; far fewer can say which feature, team or customer caused it, or whether it paid off. This talk gives you a practical FinOps method for ML and GenAI on Google Cloud’s Gemini Enterprise Agent Platform (formerly Vertex AI).

We start with the classic ML pipeline and what drives the bill. Then we move to GenAI, covering serving modes, caching, model routing, and controls that cap runaway cost. Next comes attribution: labeling every call and job, where labels fall short, and how eBPF observes traffic at the kernel level with no code changes. We finish with budgets, anomaly detection, and the team habits that make cost reviews stick.

You will leave with a shift in metric, from cost per token to cost per completed task, and five things to do on Monday.

Schedule:

  • 17:30 - Doors open
  • 18:00 - Talk + Q&A with Google Developer Expert Joshua Fox
  • 19:00–21:00 - Food, drinks & mingling

English. Light food and drinks provided.
Location: Devies offices (Vallgatan 14), Gothenburg.

Tue 3 Nov · 16:30< 50