Main Program

AI is transforming SOAR and SIEM workflows, and this session shows how tier one and two analysts can move up the value chain rather than lose their roles.

North Korean state-linked actors combine espionage with large-scale cryptocurrency theft, and Australia's 2030 security plan must defend against both.

ML-KEM keys are far larger than the ECC keys engineers optimised for, and this session covers the real handshake latency and hybrid deployment trade-offs.

Automating tier-one triage didn't remove human error from security operations, it just relocated it upstream into detection logic nobody revisits.

Frontline firefighting experience shows why calm leadership, rigorous training, and regular tabletop exercises decide how teams perform during cyber incidents.

A breakout session on how seniority bias and credentialism keep young cyber talent invisible, traced through one 15-year-old's path from locksport to the stage.

The first responder to a suspected living-off-the-land attack on an endpoint presents the evidence moment by moment for the audience to judge.

Dean Navarro shares the five priorities behind a 12-month security transformation that won board endorsement in its first month, with no upfront capital.

Lessons from hacking a submarine's control systems shape five principles for communicating technical risk in terms executives will act on.

New automated decision-making disclosure laws demand a reasoning chain from autonomous agents, and this session presents primitives for runtime governance.

Breaking a malware build into small, legitimate-looking requests across multiple LLMs reliably bypasses safety refusals, a gap current safeguards don't close.

Modern macOS trust decisions are enforced through a distributed web of code-signing, entitlements and policy daemons most defenders treat as isolated controls.

AI adoption is outpacing ISMS updates, and this session, from an auditor's view, sets out what to change before your next surveillance audit.

Thirty common mistakes new SOC analysts make in their first month reveal the gap between studying security theory and triaging live alerts under pressure.

The career that runs everything and nobody talks about is the subject for F5 Field CISO Abbas Kudrati in Ask an Expert 1 on Friday at 11.45am.

Judging an AI agent by what it is doing, whatever its identity, lets a SOC build detection that treats any agent acting outside its lane as an attacker.

The winners of both semi-finals meet on the main stage for the trophy. Hosted by David Savva-Willett, Kyle Waters and Finley Keating.

Australian cyber threat intelligence practitioners share war stories, common misconceptions, and what actually builds an impactful CTI practice.

Three human risk management practitioners debate why awareness training and phishing metrics fail to change behaviour, and what actually works instead.

Applications built by prompt carry injection flaws and weak authentication, and a container isolates the environment without fixing the broken logic inside.

A shared responsibility model maps AI security accountability across deployment tiers, showing which risks are yours and which belong to vendors.

Pitting autonomous AI agents against each other in Active Directory shows defenders lose not from weak models but from withholding environment context.

A cyber security leader's journey from early hardship to a career in IT distribution, cloud hosting and security leadership shows how reinvention works.

A panel on how combining risk quantification with continuous exposure management grounds cyber investment in validated, exploitable exposure data.