Matthew Westwood-Hill

Matthew Westwood-Hill

CISO
Cognisn

Matthew Westwood-Hill is a Cyber Security practitioner, independent researcher, and toolsmith with more than 20 years of experience spanning digital forensics, incident response, and information security leadership.

He is the Founder of Cognisn, an independent Cyber Security research and tooling venture focused on the security of AI and agentic tooling ecosystems. Through Cognisn he develops security tooling, MCP server architectures, and applied research into how large language models integrate with external tools, data sources, and the software supply chains around them. The work presented at this conference is conducted independently under Cognisn.

Prior to founding Cognisn, Matthew served as Chief Information Security Officer at Frontier Software, led the security function at the Special Broadcasting Service (SBS), served as Principal Investigator at CyberCX managing complex digital forensic and cyber breach response engagements, and led the Privacy and Cyber Response, Computer Forensics, and eDiscovery practice for Oceania at Ernst & Young.

Matthew's research examines the security architecture and threat modelling of AI tooling ecosystems, including the Model Context Protocol (MCP), browser extension attack surfaces, and the trust and review gaps that emerge when security-relevant behaviour is determined at runtime rather than at review time. He is an active developer of MCP servers, security tooling, and relay architectures, and is a graduate of the SANS Technology Institute.

He is based in Sydney, Australia.

Browser extensions: Will you ever look at them the same again?

Matthew Westwood-Hill
2026-10-15 11:45 am
2026-10-15 12:55 pm
Room 218

A working proof-of-concept extension with minimal declared permissions exfiltrates page content undetected, exposing weaknesses in store review trust.

Taming the firehose: A spooling architecture for large MCP tool responses

Matthew Westwood-Hill
2026-10-15 3:50 pm
2026-10-15 5:20 pm
Workshop Room 3 - Room 110

An open-source spooling architecture stores large MCP tool responses outside the context window, returning only the summary an LLM actually needs to work with.

World-Class Speakers

Hear from the most influential leaders and experts who will discuss pressing issues and emerging trends in cyber security.

Speaker in a grey suit presenting at a lectern on stage
Woman in headphones taking handwritten notes during a session
Audience members smiling and taking photos on their phones during a session
Woman in a hijab talking with a delegate at an exhibition stand
Keynote speaker presenting on stage with a title slide behind him
Panellists seated in white armchairs on stage during a conference discussion
Woman being interviewed with a Ticker microphone on the expo floor