Program
14-16 October 2026
Melbourne Convention & Exhibition Centre
Browse the program and start planning your CyberCon 2026 experience across three days of keynotes, panels, workshops, and more.
Results 1
Showing1 to 3 of 6
The ghost workforce: Lessons from emulating North Korean cyber tradecraft
Ghost workers use stolen or synthetic identities to get hired, then draw salaries and reach internal systems. Lessons from emulating North Korean tradecraft.
Your SOC watches every packet. Who watches the car parked outside your substation for three days?
Physical security intelligence is largely absent across SOCI-regulated operators, and this session presents a tiered framework to build that capability.
When patient safety meets incident response - medical device cyber incidents
Medical device cyber incidents can directly threaten patient safety, and this session outlines a multidisciplinary incident response process built around care.
Under the hood: The battle for security, safety & privacy in a connected vehicle world
Analysis of real data from Australia's best-selling vehicle exposes the security, safety and privacy risks hidden inside connected vehicle telematics systems.
We see the accountability void. We look away
Accountability frameworks built for human decision-makers no longer answer for algorithmic failures, and this session maps where that void actually lives.
What audit committees change about penetration testing reporting
Penetration testing reports written for engineers rarely satisfy audit committees, and this session shows how to make findings credible to both audiences.
Trusted with the blueprint: How contract manufacturers prove control over customer IP
Contract manufacturers handling customer IP need continuous visibility into data movement across endpoints and devices to prove control, not just policy.
Weak can’t enroll StrongUser Assurance in the age of passkeys
Passkeys only strengthen security if weaker enrolment, recovery and fallback paths are closed too, since attackers will always choose the easier route.
A better way to do OT cyber risk assessments
An alternative to standard IT risk frameworks for OT environments, covering AS IEC 62443, Security PHA Reviews, and Cyber-Informed Engineering.
Kill the runbook: Building analysts who can think on their feet
Building SOC analysts who reason through ambiguity, rather than follow playbooks, produces stronger investigations and more confident escalation decisions.
An auditor's guide to arguing with your auditor or how to tell your auditor they're full of it (professionally)
A certification body insider explains your rights under ISO 17021-1 and how to challenge an auditor's finding without wrecking the relationship.
Educational escape rooms for inescapably engaging cyber security group training
Escape room puzzles turn compliance-driven cyber security training into engaging, hands-on group learning, and participants learn to design their own.
Phishing exposed: How to trace, verify, and break down suspicious emails
A hands-on workshop teaches practical email forensics so participants can confidently trace, verify, and analyse suspicious phishing messages.
Well groomed: Understanding how trust is built, exploited, and weaponised in digital environments
Grooming, romance scams and financial exploitation share a common pattern of trust-building manipulation that cyber professionals can learn to recognise early.
Blindspots and breakthroughs: Securing sovereign intellectual property at the AI-Quantum nexus
A panel maps board-level accountability for AI training data integrity and post-quantum migration as the two risks converge in the same systems.
The cradle of cyberwar: She’ll be right is not a resilience strategy
Gulf state cyber conflicts this year offer lessons for Australia and New Zealand, whose regional cyber confidence has never been tested by a real adversary.
Big tech finally agreed on something. It changed nothing.
Despite broad industry endorsement, fewer than one percent of images online carry C2PA provenance data, and the reasons are structural rather than technical.
Privileged Access Management: When audit confidence and operational reality diverge
Passing a privileged access audit rarely means it works in practice, and this session maps how to close that gap before an attacker finds it first.
Insider threat alert: How AI wearables are quietly exfiltrating your corporate secrets, and what to do about it.
Always-on AI wearables that record and store conversations create a fast-growing insider risk that most organisations can neither see nor control.
Peer learning groups: What are they, why you should be in one and how to start one
Peer learning groups formed within a security-industry professional network offer a distinct complement to traditional mentoring at any career stage.
Sales Is a CISO superpower (whether you like it or not)
Effective security leadership depends on selling ideas, not just building them, and this session reframes sales as a core CISO leadership skill.
Proving you're you: The coming transformation of digital identity in Australia
New fraud, safeguarding, and identity laws are forcing Australia to finally bridge the gap between convenient and genuinely secure digital identity.
The great pivot: Mapping the future of Chinese cyber espionage
Chinese state-linked APT groups are pre-positioning inside critical infrastructure for future conflict, mapped here with methods and a defence framework.
The threat on HR: Detecting adversaries inside the remote workforce
Nation-state and financially motivated actors are posing as remote hires to gain system access, leaving behavioural and technical traces teams can detect.
Secure your place at cybercon 2026
Register now and save! Discount ends Wednesday 30 September 2026.
