Program

Biological systems offer proven resilience patterns that could reshape security architecture beyond perimeter and layered defence thinking.

A functional cyber security home lab can be built from free tools and secondhand hardware, then scaled into a genuine red and blue team range.

Thirty years on, the password habits and social engineering flaws the film Hackers depicted remain unresolved, with lessons for teaching cyber awareness.

A panel examines whether reliance on AI tooling is quietly eroding the analytical skills the next generation of security professionals will need.

Vulnerability lists without asset, identity, and exposure context hide the toxic combinations that actually lead to business-ending compromise.

A practical roadmap for becoming or partnering with an accredited Digital ID provider under Australia's new legislated framework and dual-regulator oversight.

GPS spoofing disrupted Strait of Hormuz shipping within hours using cheap open-source tools, exposing a threat largely absent from cyber security conversations.

Five years of scam data reveal how fraud tactics, channels and targeted credentials have shifted, with detection improving but overall harm continuing to rise.

A real ransomware attack chain traces stolen credentials from an infostealer log through a marketplace sale to full network compromise.

DFIR investigations keep surfacing the same root causes, and this session shows how translating findings into risk language stops incidents repeating.

Documented 2025 cases show adversaries rewriting malware, mass-generating phishing lures and hijacking defenders' own AI tools, breaking key CTI assumptions.

A ground-level look at how the PSPF, ISM, and ASD interlock explains what it actually takes to qualify and work as a registered IRAP assessor.

Good user experience is a technical requirement for security tooling, not window dressing, and this talk offers low-cost ways to test and improve it.

One practitioner achieved ISO 27001 and Essential Eight compliance simultaneously with no dedicated team, and this session shares the prioritisation method.

Most Australian and New Zealand cyber failures start in the boardroom, where technical risk language and business priorities still fail to connect.

Modular infrastructure as code, policy guardrails and approval-gated pipelines shrink the blast radius of cloud mistakes before the first workload ever lands.

A narrative-driven, procedurally generated CTF platform replaces static challenges with adaptive difficulty so players solve problems, not memorise answers.

A recurring website contact name led to an OSINT investigation into shell companies and tax havens, showing how public data becomes real intelligence.

This interactive game show reframes scams as social engineering, testing snap decisions under pressure to reveal the gap between confidence and reality.

A strategic thinking workshop helps cyber leaders act decisively through the fog of excess data, opinions, and urgency rather than waiting for certainty.

Score your organisation's cyber governance maturity live in an anonymous Chatham House workshop, and leave with a reusable framework and boardroom confidence.

A tested sequence turns IEC 62443 from a compliance checklist into a prioritised resilience roadmap spanning governance, asset visibility and incident response.

Most of an application's attack surface now comes from dependencies nobody on the team wrote or vetted, and traditional CVE scanning alone can't catch it.