Main Program

Grooming, romance scams and financial exploitation share a common pattern of trust-building manipulation that cyber professionals can learn to recognise early.

Network evidence is credited with turning up threats other security controls miss and with a place alongside endpoint and SIEM data in a layered SOC.

Three more contestants, a new themed round, and the second grand final spot up for grabs. Hosted by David Savva-Willett, Kyle Waters and Finley Keating.

A panel maps board-level accountability for AI training data integrity and post-quantum migration as the two risks converge in the same systems.

Gulf state cyber conflicts this year offer lessons for Australia and New Zealand, whose regional cyber confidence has never been tested by a real adversary.

Log volumes in cold storage and fragmented multi-cloud footprints set the problem, answered by an architecture that queries each data lake where it sits.

You're competing with an AI agent, and so is the person trying to hire you. Bianca Holmes puts the case in a Careers Village talk at 2.20pm on Thursday.

Despite broad industry endorsement, fewer than one percent of images online carry C2PA provenance data, and the reasons are structural rather than technical.

Passing a privileged access audit rarely means it works in practice, and this session maps how to close that gap before an attacker finds it first.

Always-on AI wearables that record and store conversations create a fast-growing insider risk that most organisations can neither see nor control.

Peer learning groups formed within a security-industry professional network offer a distinct complement to traditional mentoring at any career stage.

Effective security leadership depends on selling ideas, not just building them, and this session reframes sales as a core CISO leadership skill.

New fraud, safeguarding, and identity laws are forcing Australia to finally bridge the gap between convenient and genuinely secure digital identity.

Nation-state and financially motivated actors are posing as remote hires to gain system access, leaving behavioural and technical traces teams can detect.

A human-in-the-loop AI pipeline turns messy OSINT into structured intelligence, validated data, and automated threat hunts at scale.

Incident response tabletops need real technical friction, log analysis and failed fixes to test decisions under pressure, not a rehearsed script.

What the tardigrade's extreme survival mechanisms suggest about building cyber resilience against AI-accelerated and geopolitically driven threats.

Four documented AI incidents each trace back to missing ISO 42001 controls, and this session maps the specific safeguards that would have reduced their impact.

An adversary-led threat modelling approach adapted from PASTA maps how prompt manipulation and dynamic outputs create attack surfaces standard models miss.

AI now lets red teamers chain everyday SaaS access and automation into high-impact breaches without deploying malware or touching an endpoint.

National briefing findings on sovereign risk and AI readiness show organisations still need to nail identity, access and data governance basics first.

A practitioner's account of testing OpenBao as a secrets management foundation for autonomous agents, covering what worked and where it fell short.

Living under GDPR revealed that privacy is fundamentally about power, offering a grounded case for why Australia needs stronger data protection.

Cyber threat intelligence methodology extends to human-motivated threats, showing how structured behavioural indicators can detect social engineering earlier.