The human edge in red teaming: Where AI falls short in wireless and OT

As AI and automation continue to reshape cyber security, many organisations are increasingly looking toward automated tooling to accelerate offensive security testing and improve assurance at scale. But while AI performs well in structured enterprise environments, some of the most critical attack surfaces remain beyond the reach of automation. 

Wireless and Operational Technology (OT) environments continue to demand something AI cannot replicate: human intuition, field experience, adaptive thinking, and specialist tools/tradecraft that cannot be replicated through prompts, scanners, or scripted playbooks alone. 

Drawing from frontline red teaming and offensive security engagements across diverse real-world environments, including government departments, multinational mining operations, hospitality venues (e.g. sushi train restaurant), and ASX-listed enterprises, this session explores lessons learned from assessing complex wireless and hybrid IT/OT ecosystems where conventional approaches fall short. 

The session will deep dive into practical realities of offensive testing against non-traditional environments, including the challenges of attacking proprietary wireless implementations, embedded and industrial systems, and safety-sensitive operational networks using specialised techniques and purpose-built tooling.

A key focus of the session will be the specialist tooling that enables modern wireless and OT red team operations, including platforms such as Alfa wireless adapters, WiFi Pineapple, Proxmark, HackRF, Bash Bunny, Raspberry Pi devices equipped with 4G dongles, and other purpose-built offensive hardware used to assess physical, wireless, and radio-frequency attack surfaces. Through practical examples, the talk will demonstrate how these tools help operators uncover weaknesses across technologies and protocols that sit beyond the reach of traditional scanners and AI-driven testing, reinforcing why specialist-led offensive security remains critical in complex operational environments. 

This session will cover:

• Real-world lessons learned from red team operations targeting enterprise wireless and hybrid IT/OT environments
• Why specialist tools and operator judgement remain essential in niche attack surfaces
• Common weaknesses identified across wireless, industrial, and operational networks
• The limitations of AI and automation when testing real-world physical and enterprise wireless environments
• Strategic considerations for organisations seeking meaningful assurance beyond automated testing

Designed for both executives and practitioners, this talk provides a grounded look at the realities of specialist red teaming and highlights why some of the most critical vulnerabilities are still uncovered only through experienced human operators. 

Attendees will leave with a deeper understanding of the hidden risks present in wireless and OT environments, the tradecraft required to assess them effectively, and why the future of advanced red teaming remains firmly human-led where it matters most.