⚡️ Security Talks + Networking — Hunting TDS & Agentic Vulnerability Management

​Two talks. Two speakers. Two very different sides of the same problem — how attackers pick their targets, and how defenders pick what to fix. ​ And a proper amount of time to talk to each other: a full hour of networking before the talks, and the rest of the evening after. The talks are the excuse; the room is the point. ​This month we're partnering with Allianz Technology, who are opening the doors of their Barcelona offices to host us. 🙌 ​We're also going deeper instead of wider: 20 minutes per speaker, plus a real Q&A after each. Bring questions. ​Whether you hunt threats, run security operations, build the pipelines, or sign off the budget — there's something here for you. ​🎙️ The Lineup ​1️⃣ Individual research on Traffic Distribution Systems (TDS): associated campaigns and YARA rules for detection By Mar Garcia Sabaté (Threat Intelligence Lead @ Allianz Technology) ​Before a victim ever sees a payload, a TDS has already decided who they are and whether they're worth the trouble — filtering by geography, device, and whether you look like a researcher. Original research into the campaigns built on this infrastructure, and the YARA rules you can take home to detect them. ​2️⃣ Nobody Reads 40,000 Vulnerability Findings By Gerardo Prieto (CISO) ​Handing the backlog to a chain of AI agents — and knowing when to stop and ask a human. ​Detection was never the bottleneck. Triage, ownership, chasing and retesting are. This session walks through an agentic pipeline that takes a finding — whether it came from a cloud scanner, a SAST tool, an endpoint agent or a pentest report — all the way to a verified fix. Contextual severity scoring, one agent independently checking another's work, and the hard part: knowing when the automation is confident and when a human still has to decide. ​🤝 Organized by Barcelona CyberSec, hosted by Allianz Technology ​📍 Venue: Central Barcelona. This is a hosted corporate space, so attendance is by approval and the exact address is sent once you're approved. Please bring photo ID — the guest list is checked at reception. ​🎟️ Entry: Free. Registration and approval required. ​⏳ Approvals go out on a rolling basis, so request early — capacity is limited by the venue. ​🕒 Agenda (⚠️ Heads up: talks start strictly on time!) ​6:00 PM → Doors, check-in & networking ​7:00 PM – 7:25 PM → Traffic Distribution Systems (with Mar) ​7:25 PM – 7:50 PM → Nobody Reads 40,000 Vulnerability Findings (with Gerardo) ​7:50 PM onwards → Networking & drinks 🥤 🍻 ​Come at six. That first hour is where most of the good conversations happen, and it's the reason people keep coming back. ​See you there! https://barcelonacybersec.com