The Department of Computer Engineering (DEI) of Instituto Superior de Engenharia do Porto (ISEP), in collaboration with the Master in Informatics Engineering (MEI), invites you to attend  another talk, this time with the theme “Security Circus in the NIS2 Era or A Case Study”, which will take place on November 2, at 6:00 p.m., at ISEP.

This is an in-person event, held in room B201.

Abstract

This presentation analyzes two security incidents involving a Portuguese insurance intermediary that put its clients’ accounts and sensitive data at risk. Although the vulnerabilities were responsibly disclosed, inadequate fixes and delayed responses allowed the issues to persist. These cases reveal weaknesses in secure development practices, incident response, and organizational cybersecurity maturity. At a time when Portugal is transposing the NIS2 Directive into national law, this presentation raises a fundamental question: is regulation alone enough to improve cybersecurity? The conclusion is clear: legal compliance does not equate to security. Protecting clients’ data requires not only technical improvements but also a stronger security culture.

(+INFO)

Speaker

Paulo Silva is an ethical hacker and senior security researcher with over 20 years of experience in software development and cybersecurity. An active member of the OWASP community and the lead of several projects, he has contributed to leading initiatives such as the OWASP API Security Top 10 and various secure development guides. His work focuses on application and API security, vulnerability research, and penetration testing, and he has identified security flaws in large-scale platforms and organizations. A strong advocate of knowledge sharing, Paulo regularly speaks at international cybersecurity conferences, including DEF CON, RootedCON, OWASP Global AppSec, and BSides, where he shares his experiences, practical insights, and lessons learned from security research in real-world environments.

(+INFO)

Organization

This talk is organized by QTDEI in collaboration with the Master in Informatics Engineering (MEI) of Instituto Superior de Engenharia do Porto (ISEP).