Program

Using the 2026 Iran-US/Israel conflict as a case study, this session quantifies why organisations once considered non-combatants now carry real cyber risk.

A real AI-generated command-and-control sample shows how identity-based attacks now blend into legitimate activity, and what SOC teams need to change.

Cloud identity and access management attacks demand a specialised incident response approach distinct from traditional on-premises investigations.

Triage decisions made during SOC escalation can destroy the forensic evidence DFIR investigators need, and this session closes that handover gap.

A structured sprint cycle turns threat intelligence into validated detection coverage, hypothesis-driven hunts, and detection models that compound over time.

Stanislav Petrov's refusal to trust a flawed 1983 early-warning system offers a model for how security-critical AI decisions should be second-guessed.

A year of penetration testing AI-enabled applications exposes recurring failures in prompt handling, tool permissions and data leakage security teams miss.

A working proof of concept shows how a fake compliance website can trick AI agents into leaking secrets and suppressing vulnerability remediation.

Most organisations deploy AI but few govern it, and this session offers a three-step framework to unblock the compliance gridlock stalling AI oversight.

Solo IT responders without a SOC need a simple confirm, contain, preserve, communicate loop to manage the first hour of an incident without destroying evidence.

AI tools touching privileged legal communications create governance risks most organisations haven't addressed, and this session sets out the controls to own.

Human risk in DevSecOps now extends beyond phishing to fatigue, psychological safety and blind trust in AI overrides, needing teams designed for pressure.

Two years defending a Fortune 120 Korean e-commerce giant reveal what cyber security looks like on a frontline shaped by geopolitics and language barriers.

This tutorial gives SMEs a practical framework for selecting cyber insurance, preparing for underwriting, and staying claims-ready when an incident hits.

The MAESTRO framework applies threat modelling to agentic AI, helping practitioners identify threat vectors and co-create tailored countermeasures.

An inclusive culture systems framework gives cyber leaders practical steps to build unity, collaboration, and sustained high performance in their teams.

A hands-on workshop hunts threats across a simulated OT environment using Kali Purple, detecting and mitigating attacks on SCADA, PLCs and industrial networks.

A former professional cricketer told she would never walk again, Kath Koschel taught herself to walk three times and founded The Kindness Factory.

Incident response and cyber insurance practitioners unpack why outcomes depend less on having a response plan than on executing it under real pressure.

Hands-on findings on GPU container escapes, model-weight side channels, and agent trust failures that traditional cloud native tooling misses entirely.

An internal OSINT challenge covering 94 tasks showed staff across a power network how everyday online activity can expose far more than they realise.

National research across school outreach, university and workforce entry reveals a pathway continuity problem, not a talent shortage, and how to fix it.

Borrowed from military doctrine, centre of gravity analysis identifies the one dependency an attack would need to disrupt, making prioritisation defensible.

From Stuxnet to NotPetya to a 2026 wiper attack on Stryker, this session tracks how state-built cyber weapons keep spilling over onto ordinary enterprises.