senhasegura is now Segura®!  Get to Know Our New Brand ›

Hello, I’m Filipi Pires!

Head of Identity Threat Labs at Segura®
Security Researcher | Speaker | Instructor | Advocate
‍
I lead research on identity-based threats, speak at cybersecurity conferences around the world, and train professionals through hands-on courses in malware, red teaming, and application security.

About me

I’ve worked in cybersecurity and infrastructure for over 15 years, across red team labs, product security, and technical training. At Segura®, I lead Identity Threat Labs, where my research focuses on attack path discovery and identity-based threats. I also serve as Global Product Advocate, Director at Red Team Village, and an active member of the hacker community.

Beyond research, I stay involved in open-source projects, run technical workshops, and help grow the global security community.

Articles

Straight from the lab: technical deep dives and field-tested tactics.

Inside the 2025 Cyberattack on Brazil’s Payment System: Timeline and Takeaways

Explore how attackers exploited C&M Software to steal millions from BMP Money Plus using valid credentials and Brazil’s real-time PIX infrastructure.
Read full article ›

Understanding Identity Threats in Cybersecurity: Insights from Filipi Pires and Joseph Carson

This blog breaks down why identity is now the top target for attackers and a critical weak point in cybersecurity. It offers practical insights from Filipi Pires and Joe Carson on tackling misconfigurations, boosting visibility, and staying ahead through continuous learning.
Read full article ›

DEFCON and Black Hat Speaker

I’m back in Las Vegas this August. This year, I’ll be presenting on identity protection, red team malware, misconfigurations, and offensive AI across multiple villages, including Cloud, Red Team, and Adversary. I’m also leading a hands-on workshop and joining a panel discussion on adversarial thinking.
Join Me at the Events ›

Podcasts and Videos

Talks, walkthroughs, and interviews, from strategy to malware behavior.

Upcoming Events

I’ll be speaking, sharing tools, and meeting with fellow researchers. Come say hi!
BSides - Las Vegas
August 5, 2025
Machine Identity & Attack Path: The Danger of Misconfigurations.
Black Hat
August 7, 2025
APIDetector v3 - Advanced Swagger Endpoint Scanner with Real-time Web Interface.
DEF CON - Cloud Village
August 8, 2025
Transforming Identity Protection: Innovating with AI and Attack Paths.

Private Happy Hour at Black Hat

August 6  |  Las Vegas
‍Let’s connect at Black Hat 2025! RSVP below.