Program

Beyond state-sponsored sabotage headlines, most OT organisations' real incident response work involves ransomware and commodity malware on ageing systems.

Busy dashboards and expanding controls can mask strategic failure, and this session shows how to separate genuine risk reduction from well-organised activity.

Building a Potato exploit from scratch explains why these privilege escalation techniques keep working despite years of Microsoft patching.

MFA and EDR alone cannot stop attackers who exploit administrative practices and identity workflows, the attack paths organisations already built themselves.

New research across 67 boards reveals why most directors rate cyber security reporting poorly, and introduces a framework to align expectations.

A honeypot breach by a pro-Russian hacktivist group reveals current tactics against OT networks and the hardened controls that stop them.

Seven real breaches reveal how governance failures, not technology gaps, determine whether an organisation recovers cleanly or falls apart.

A case study shows how one enterprise consolidated fragmented AI guidance into a governable control framework covering RAG, copilots and agentic systems.

A Think Tank on cyber security as part of operational resilience for transport, health, water and utilities, and on lessons from regulated industries.

Building and running a crisis management exercise from scratch gives participants a repeatable model they can take back to their own organisation.

An open-source spooling architecture stores large MCP tool responses outside the context window, returning only the summary an LLM actually needs to work with.

A hands-on SANS FOR508 workshop: direct an agentic AI through a simulated DFIR investigation, then approve or reject each finding before it enters the case.

Tane Hunter built machine learning models at Australian research hospitals and wrote Full Stack Human. He has given over 500 keynotes across five continents.

A panel on the new Cyber5050 report: what the survey data says about cyber's skills shortage and the barriers limiting women's participation and progression.

As AI agents start shopping and paying on people's behalf, this session maps the new commerce protocols and controls needed to secure transactions.

As AI agents gain power to manage cloud infrastructure, Tier 0 must expand beyond domain controllers to cover identity platforms and agentic access.

A randomised trial found mandatory phishing training makes employees more likely to click, and this session explains why the model is broken and what works.

Perspectives from governance, risk and security operations show how credibility is built, challenged and unevenly recognised for women in cyber security.

Generative AI embedded across enterprise tools quietly accumulates permissions and authority, and this session proposes governing it as a non-human insider.

Q-Day will break RSA and ECC, and adversaries are already harvesting encrypted data to decrypt later. What building a sovereign quantum capability would take.

As Australia's SOCI Act extends to space technology, CISOs must now factor orbital assets into critical infrastructure risk management plans.

Most AI threat intelligence tools produce impressive but unusable summaries, and this session shows how to build systems that produce structured intelligence.

Australians lost $2.18 billion to scams in 2025. How to read the Scams Prevention Framework as an operational blueprint that turns reporting into disruption.

Understanding attacker psychology and system environments in critical infrastructure helps organisations cut compromise risk when essential services are hit.