Program

As automated detection and response now operate faster than human validation, resilience depends as much on managing analyst fatigue as on the technology.

A framework combining continuous security testing with adversary-based risk validation closes the gap between compliant on paper and secure in practice.

Continuous monitoring since March 2026 reveals how autonomous AI agents leak credentials into the open internet, and how to detect and defend against it.

Australian SMEs face relentless cybercrime with stretched IT teams, and practical, budget-fit steps can still close the gap adversaries exploit.

Two landmark 2025 OAIC privacy rulings set a legal baseline for reasonable security controls, giving CISOs court-tested language to justify next year's budget.

Commodity phishing kits and infostealer economics have made MFA bypass routine, and this session sets out a tiered defence built from a real breach.

A practical walkthrough of operationalising ISO 42001 and ISO 42005 AI impact assessments inside existing governance frameworks like ISO 27001.

A behaviour-led model built on constrain, observe, and pursue helps OT and ICS teams detect adversary movement before signature-based alerts fire.

Known as the Friendly Hacker, Keren Elazari founded BSidesTLV and Leading Cyber Ladies, and researches security tech at Tel Aviv University.

Geoff White has delivered more than 300 keynotes. His investigations range from North Korea's hacking campaign to tech's transformation of money laundering.

Following the Slay Review, a panel debates whether mandatory threat sharing can turn critical infrastructure defence into a legislated sovereign capability.

Australia's newly established Cyber Civilian Reserve turns years of policy discussion into a deployable, industry-led national cyber capability.

A year of stress-testing a single AI merge-gate agent against attackers led to a multi-agent supply chain security system that caught a major npm compromise.

Practical steps that improve application security and developer experience together, rather than trading one off against the other.

Cutting security spend to the compliance minimum shifts real risk onto employees, customers, and communities rather than the company that saved money.

Treating OT security as uniquely dangerous rather than an engineering condition keeps teams excluded and risk unmanaged, when shared ownership works better.

Lived experience under a surveillance state reshapes threat modelling, crisis leadership, and geopolitical strategy for Australia's Indo-Pacific position.

Farms increasingly depend on a single foreign satellite operator for connected equipment, leaving agricultural data integrity exposed as a security risk.