Sobre
Atividades
1 mil seguidores
-
Joao Ferreira compartilhou istoJoao Ferreira compartilhou istoHonored to be featured in the latest episode of "Linha da Frente" in RTP. The episode dives into what the cybersecurity landscape looks like in Portugal today. It features Ethiack, Cybersecurity Challenge PT, Centro Nacional de Cibersegurança - Portuguese National Cybersecurity Centre and more. 🎬 Full episode (in Portuguese): https://lnkd.in/e6KUFUmg Video credits: RTP
-
Joao Ferreira compartilhou istoJoao Ferreira compartilhou isto
-
Joao Ferreira compartilhou istoJoao Ferreira compartilhou istoYou only value being healthy when you're sick. And boards only value cybersecurity after an attack. Does it have to be like this? No, because there's a way of finding the ROI of cybersecurity. We've explained our system for calculating ROI based on your assets, risk score, and vulnerabilities. Understand how we do it, and apply it by yourself, here:The Hidden ROI of Security: How to Put a Number on the Risks You Stop. | Ethiack — Autonomous Ethical Hacking for continuous securityThe Hidden ROI of Security: How to Put a Number on the Risks You Stop. | Ethiack — Autonomous Ethical Hacking for continuous security
-
Joao Ferreira compartilhou istoJoao Ferreira compartilhou istoCVSS alone is a not enough as a metric for true exposure. We just published the math behind Ethiack’s new Risk Score algorithm. We built a Risk Score that CISOs and Security Managers can actually trust and act on. By integrating asset context, predictive intel (EPSS), and real-world exploitation data (CISA KEV) with strict aging penalties, we give you the true picture of your exposure. Read the technical deep dive here 👇Understanding our Risk Score, and why it reflects real-world conditions | Ethiack — Autonomous Ethical Hacking for continuous securityUnderstanding our Risk Score, and why it reflects real-world conditions | Ethiack — Autonomous Ethical Hacking for continuous security
-
Joao Ferreira compartilhou istoJoao Ferreira compartilhou istoAre there "ghosts" in your business logic? 👀 You can write syntactically perfect code, but if your business logic is broken, your app is still wide open. Hackian managed to exploit app rules logic in SonarQube by simply thinking outside the box and got access to projects it wasn't supposed to. Curious? Read the full article👉https://lnkd.in/gtym-_pF #AIHacking #AppSec #SonarQube
-
Joao Ferreira compartilhou istoJoao Ferreira compartilhou istoHackian just uncovered a high-severity vulnerability and achieved 1-click RCE in Molbot (previously Clawdbot), fully autonomously, in under 2 hours. We explain how and show you Hackian’s thought process in our latest blog: https://lnkd.in/eXUXFHpx
-
Joao Ferreira compartilhou istoJoao Ferreira compartilhou istoRetail in Europe has a bad security posture - but it's easily fixable. We've analyzed over 50,000 assets from Retail companies and came to concerning conclusions: - 16% of connections use invalid or outdated SSL certificates; - 17% of web servers expose their version number, easing criminal exploitation; - Medium-sized retailers, in the 1000-5000 employee range, show the most concerning posture. Our new “State of Digital Exposure for European Retail” report uses this data, industry trends, and insights from experts at Nemlig, Carrefour, and others to show what’s to come in Retail. Read the report and find out what you have to do to stop being a statistic. Fully accessible here: https://lnkd.in/eip-tad5
-
Joao Ferreira compartilhou istoJoao Ferreira compartilhou istoIn the AI era, traditional security scanners are obsolete. Ethiack CEO and Founder Jorge Monteiro discusses the transition to autonomous technology that mimics the behavior of real hackers 👇
-
Joao Ferreira compartilhou istoJoao Ferreira compartilhou istoWe are hiring a 𝐐𝐀 𝐀𝐮𝐭𝐨𝐦𝐚𝐭𝐢𝐨𝐧 𝐄𝐧𝐠𝐢𝐧𝐞𝐞𝐫 at Ethiack -> https://lnkd.in/eEu9haA7 Here are a few things I would like you to know: At Ethiack, we secure organizations. Our mission is to offer the best pentest in the world: a combination of the speed of automated and agentic vulnerability detection with the deep knowledge of the best hackers in the game. The engineering team is the backbone of this mission. We are a group of curious, self-learning individuals striving to build a premium product. Although young and not yet "seniors" on the CV, we are eager to try, fail, and learn from the outcomes. If you ever get blocked, you can count on a team that is always willing to jump in and help you find a solution. That collaborative spirit is what keeps us moving forward. We ensure our portal is stable, the UX is smooth, and vulnerabilities are detected instantly, even when targeting huge attack surfaces. This is where you come in: help us ensure that the quality of what we offer is truly world-class. 📩 Reach out to me if you want to know more about us and the role. #QAAutomation #CyberSecurity #Hiring #TechJobs #Ethiack
-
Joao Ferreira reagiu a issoJoao Ferreira reagiu a issoOpenClaw has over 24k pull requests closed and 6.5k open. This is scale that no software tooling has seen before. We need to re-architect how software lifecycle is done from the ground up. This volume cannot be processed by a human in any way. It is not bad or good, its just a problem space we've never tackled.
-
Joao Ferreira gostou dissoJoao Ferreira gostou dissoReceiving the #SW50 Portugal 2026 Recognition Diploma was a deeply meaningful moment for me. Some recognitions do more than celebrate an achievement. They make us pause and reflect on the journey, the choices, the challenges, and the values that have shaped who we are. This was one of those moments. As I received this diploma, I found myself thinking not only about where I am today, but about everything that this path has required over the years: commitment, resilience, responsibility, and a constant desire to make my work matter. In every role I have embraced — as an academic, as a leader, as a researcher, as a board member and in the spaces where I have worked to support and empower others, especially women — I have tried to remain guided by purpose. By the belief that leadership should create possibility, elevate others, and leave a meaningful mark. That is why this recognition touched me so deeply. It is, of course, an honour. But it is also a reminder: that impact is built over time, that purposeful work does not go unnoticed, and that the responsibility to keep opening doors becomes even greater. I am truly grateful to Santander Open Academy, to Ines Rocha de Gouveia for the way she leads this initiative, to Isabel Guerreiro for her inspiring words, and The London School of Economics and Political Science (LSE) for this opportunity, and proud to stand alongside such inspiring women. I receive this moment with gratitude, humility, and an even stronger commitment to continue contributing with purpose, conviction, and heart. Congratulations as well to all the women in this edition — it is a privilege to be part of this group. To those who have inspired me by example, challenged me to go further, and believed in me at important turning points — thank you. You are part of this moment too. https://lnkd.in/efHjbiVt https://lnkd.in/ecPUh4FB #SW50 #WomenInLeadership #Leadership #FemaleLeadership #Impact #ExecutiveEducation #LSE #SantanderOpenAcademy
-
Joao Ferreira gostou dissoJoao Ferreira gostou dissoWe run offensive testing across hundreds of external assets simultaneously, which gives us is data on how severity scores correlate with actual exploitability. It's not good! A few patterns we see repeatedly: A dependency has a CVSS 9.8 CVE. The vulnerability requires a specific configuration that the application doesn't use. The code path that triggers it is never called, but still sits at the top of your dashboard. Meanwhile, a CVSS 5.3 information disclosure on a forgotten staging subdomain leaks internal API endpoints. Those endpoints have no authentication and they expose PII. That 5.3 is your actual critical finding, but it's buried on page four of the report. No hate towards CVSS - they have ways around this (like environment scores) but they're underutilised by most scanning tools because those tools lack context. This is why we built our risk scoring around exploitability: what's actually exposed, what's reachable from an attacker's perspective, and what chains together.
-
Joao Ferreira reagiu a issoJoao Ferreira reagiu a isso𝟒 𝐲𝐞𝐚𝐫𝐬 𝐚𝐠𝐨 𝐭𝐨𝐝𝐚𝐲, 𝐄𝐭𝐡𝐢𝐚𝐜𝐤 𝐰𝐚𝐬 𝐛𝐨𝐫𝐧. André Baptista, Jorge Monteiro, and Vítor Pinho started with a clear conviction: security testing had to be continuous, validated, and built on ethics. Not annual reports full of noise. Not compliance theater. Real offensive security, at scale, for everyone. 4 years later: - 100,000+ validated vulnerabilities found - 200+ vulnerability classes covered - 99.5%+ accuracy, zero tolerance for false positives - Customers across fintech, healthcare, education, critical infrastructure - Europe's first conference on AI and cybersecurity (HackAIcon) - And a team that genuinely believes the internet can be made more secure I'm proud to be part of this. Not just because of what we've built, but because of how we've built it: with integrity, with the ethical hacking community at the center, and with the conviction that AI and humans are stronger together than apart. This is a marathon, not a sprint. Year 5 starts now. Happy birthday, Ethiack!
-
Joao Ferreira gostou dissoJoao Ferreira gostou dissoI wrote a story about how a 10 line single threaded algorithm can be changed to suddenly do more than 100M random lookups per second from main memory (x14 speed increase). Bringing the science back to the world of computer science (getting tired of reading about AI).
-
Joao Ferreira gostou dissoJoao Ferreira gostou dissoFast food, fast fashion and now... Fast Software? We will be entering an era of unprecedented ability to produce insane amounts of software. Many companies will be born taking advantage of this, and for a while it will seem like software prices will tend to zero, that software will be highly replaceable and just exists to be consumed - with no downside whatsoever, as more is always better than less. Just like fast food hurts the body and fast fashion hurts the planet, fast software will hurt businesses When the dust settles we will have a deeper admiration and appreciation for high quality, built with purpose, software systems.
-
Joao Ferreira gostou dissoJoao Ferreira gostou disso
Experiência e formação acadêmica
-
ETHIACK
Ver experiência completa de Joao
Veja o cargo, tempo na empresa e muito mais dessa pessoa.
ou
Licenças e certificados
Projetos
-
Eco-Efficiency Portal
-
«Eco-Efficiency Portal» is a Joomla-based platform that has two main purposes: in the back-office side, it collects, stores, processes and displays consumption data from buildings of one entity in order to inform and support decisions to make them more efficient and greener; in the front-office side, it allows people to see the ecological historic of each building, letting them know what ecological efforts are being taken. In other words, it is a portal that not only allows Gaianima to reduce…
«Eco-Efficiency Portal» is a Joomla-based platform that has two main purposes: in the back-office side, it collects, stores, processes and displays consumption data from buildings of one entity in order to inform and support decisions to make them more efficient and greener; in the front-office side, it allows people to see the ecological historic of each building, letting them know what ecological efforts are being taken. In other words, it is a portal that not only allows Gaianima to reduce its costs but also celebrates eco-efficiency. This project was developed for a municipal company, Gaianima EEM, in a course named Project Management Laboratory.
Outros criadores -
-
Critter Quest
-
Critter Quest was a social mobile game developed during the Software Development Lab course, comprising a lot of different modules, such as the Android application, SSH server, SQLite database, API for data request, as well as both desktop and mobile versions of the website.
Starting off with a customizable avatar, the player can create and develop social links with other players’ avatars; these social links may vary from a bad to a good relationship, depending how the they interact with…Critter Quest was a social mobile game developed during the Software Development Lab course, comprising a lot of different modules, such as the Android application, SSH server, SQLite database, API for data request, as well as both desktop and mobile versions of the website.
Starting off with a customizable avatar, the player can create and develop social links with other players’ avatars; these social links may vary from a bad to a good relationship, depending how the they interact with each other. These interactions could be raised or lowered through cooperative GPS-based quests (think of geocaching with virtual rewards), competitive multiple-choice trivia questions, item trades/offers and even private message communication. The avatar’s stats (such as wisdom, patience or stamina) evolve depending on the kind of quizzes and quests the player takes. The website component also contained a news blog and an online shop where players could buy items with real money.Outros criadores -
Idiomas
-
English
-