Main Program

Brand impersonation is shifting from email to social platforms, bypassing DMARC entirely, and this session shows how to extend detection beyond the inbox.

James Morphett is in Ask an Expert 1 at 2.20pm Thursday for people, culture and workforce development or leadership, governance and accountability.

Security executives share lessons from real AI-driven incidents on governing autonomous agents that already make decisions with minimal human oversight.

Geopolitical instability, systemic events, and AI are reshaping cyber insurance markets, changing how insurers price and assess risk for buyers.

Guardrails and human expertise sit alongside the automation in the SOC described, where AI agents triage alerts and initiate response actions.

What is broken in cyber recruitment right now? Laura Mackay's Careers Village talk on the human side of getting hired asks it at 3.50pm Thursday.

New research shows AI now runs personalised social engineering attacks as effectively as it once simulated them, testing today's training frameworks.

Misconfigured GitHub Actions pipelines are an increasingly attractive supply chain target, and this talk offers practical guidance for hardening CI/CD.

Behavioural science explains why annual training and phishing simulations rarely change behaviour, and what an evidence-based human risk program needs instead.

A father and son in cyber security share how ADHD traits such as hyperfocus become strengths in threat detection and incident response.

Compensating human workarounds inside operational data pipelines become invisible risk once AI quietly replaces the people who were fixing broken data.

Four years of scambaiting data shows the real intelligence value of disrupting fraudsters, and why closer ties with authorities would help victims more.

Quantum computing's ability to process vast data quickly could move cyber defence beyond the limits of classical real-time threat response.

An open-source pipeline flags crypto scam sites within hours of launch and traces stolen funds through a fully auditable evidence chain.

SQL pipe syntax makes SQL usable for security hunts and detection logic, potentially breaking down the query-language silos between SIEMs and analysts.

Victims under pressure delay reporting, hide evidence and make rash decisions, so response models need to stabilise people before technical response begins.

Beyond state-sponsored sabotage headlines, most OT organisations' real incident response work involves ransomware and commodity malware on ageing systems.

Busy dashboards and expanding controls can mask strategic failure, and this session shows how to separate genuine risk reduction from well-organised activity.

Building a Potato exploit from scratch explains why these privilege escalation techniques keep working despite years of Microsoft patching.

MFA and EDR alone cannot stop attackers who exploit administrative practices and identity workflows, the attack paths organisations already built themselves.

New research across 67 boards reveals why most directors rate cyber security reporting poorly, and introduces a framework to align expectations.

A honeypot breach by a pro-Russian hacktivist group reveals current tactics against OT networks and the hardened controls that stop them.

Seven real breaches reveal how governance failures, not technology gaps, determine whether an organisation recovers cleanly or falls apart.