What 7,500 penetration tests tell us about the state of cyber security in Australia & NZ

Liam O'Shannessy
2026-10-14 3:50 pm
2026-10-14 4:30 pm
Room 204

Three years of penetration testing data across Australia and New Zealand reveal which vulnerabilities are worsening and where security investment pays off.

Session Details

Over the past three years, CyberCX's penetration testing team performed over 7,500 engagements for more than 1,400 customers, providing over 70,000 individual findings. Generated by a workforce concentrated in Australia and New Zealand, this dataset provides a unique insight into the state of security of our region.

This presentation draws insights from the analysis of this dataset, including 3-year trend analysis, answering questions like:

  • Are we collectively getting better at managing vulnerabilities, or getting worse?
  • What are the most common root causes for the highest risk vulnerabilities identified, and which root causes are trending upwards?
  • Which industry segments exhibit higher rates of high-risk findings, and which vulnerability categories are particular problems for which industries?
  • Where are the bad guys beating us? Are there certain types of security testing engagements that are more effective at identifying vulnerabilities?
  • What do we see when we hack AI systems?

Based on these insights, how can we tailor our security strategy to maximise return on investment?

There's More Where This Came From

Browse hundreds of sessions and build an agenda around the topics that matter to you.

Speaker in a grey suit presenting at a lectern on stage
Woman being interviewed with a Ticker microphone on the expo floor
Audience members smiling and taking photos on their phones during a session
Speaker presenting on stage against a blue and pink backdrop
Attendees wearing CyberCon headphones listening during a session
Panellists seated in white armchairs on stage during a conference discussion
Keynote speaker presenting on stage with a title slide behind him
Speaker addressing the audience with a microphone as a colleague looks on