Program
Tutorial – Day 1
18 May
Tutorial – Day 2
19 May
Conference – Day 1
20 May
Conference – Day 2
21 May
9:00am
Southport 1
*BOOKED OUT* Social Engineering - Physical Red Teaming Lessons From The Field
Southport 2 & 3
Boss Fight: Disrupting Phishing Campaigns with urlscan.io
Gold Coast
The Fifth International Cybersecurity Challenge
Surfers Paradise 1
*BOOKED OUT* Practical Digital Forensics Triage and Analysis Using KAPE and EZ Tools
Surfers Paradise 2&3
*BOOKED OUT* Cyber Risk Quantification Bootcamp
Coolangatta 1&2
Code to container: How to secure a container build pipeline
Pratima Singh, Chris Lamont-Smith
Coolangatta 3&4
AWS Security Event Simulation - Ransomware on S3 and SSRF with IMDSv1
Richard Billington, Zohreh Norouzi
12:30pm
Lunch break
1:30pm
Southport 1
*BOOKED OUT* Social Engineering - Physical Red Teaming Lessons From The Field (Full day - Continued)
Southport 2&3
Boss Fight: Disrupting Phishing Campaigns with urlscan.io (Full-day – continued)
Gold Coast
The Fifth International Cybersecurity Challenge
Surfers Paradise 1
High School Student CTF
Surfers Paradise 2&3
Cyber Risk Quantification Bootcamp (Full-day – continued)
Coolangatta 1&2
AI Compliance implementation using ISO42001, ISO42005, NIST-AI-RMF and global AI Guidelines
Coolangatta 3&4
*BOOKED OUT* From Silos to Synergy: How Identity Unifies Security Architecture
Michael Smith, Will Harrington
9:00am
Southport 1
*BOOKED OUT* Practical Threat Hunting: From Intelligence to Action
Southport 2&3
*BOOKED OUT* How to Actually Change Security Behaviour (without the BS)
Gold Coast
Day 2: The Fifth International Cybersecurity Challenge
Surfers Paradise 1
*BOOKED OUT* Game Plan for AI Governance: ISO 42001 Integration for Security Leaders
Surfers Paradise 2&3
*BOOKED OUT* Hands on Enterprise Security Architecture Workshop
Coolangatta 1&2
High School Student CTF
Coolangatta 3&4
*BOOKED OUT* Kickstart your CTI program with MISP
12:30pm
End of AM tutorials | Lunch break
1:30pm
Southport 1
Practical Threat Hunting: From Intelligence to Action (Full-day – continued)
Southport 2&3
Channel Meets Gold Coast - Invite Only
Gold Coast
Day 2: The Fifth International Cybersecurity Challenge
Surfers Paradise 1
Understanding Emerging AI and Data Governance Best Practices
Leah Mooney, Anthony Smit, David Rudduck
Surfers Paradise 2&3
*BOOKED OUT* Hands on Enterprise Security Architecture Workshop (full day - continued)
Coolangatta 1&2
High School Student CTF
Coolangatta 3&4
Kickstart your CTI program with MISP (Full-day – continued)
9:00am
9:20am
9:40am
10:10am
Plenary
How Attackers Play the Endpoint—and How to Break the Game
10:30am
Morning Tea Break
11:00am
Southport
Flattening the SOC: Re-thinking Tiered Operations to Improve Outcomes
Gold Coast
DDoS, Doxxing, and Digital Warfare: Cybersecurity Lessons from the Gaming Trenches
Surfers Paradise
"GAME OVER! Start Again?" - Getting Security Right From The Start
Coolangatta
When Attackers Use AI: How Defenders Can Respond
11:45am
Southport
Incident Response: What Security Teams Need to Know (legal one)
Gold Coast
Cognitive Warfare: When Defenders Stop Updating Their Mental Model
Surfers Paradise
Levelling up your CTI program with the CTI-CMM
Coolangatta
Make Your Business a Hard Target for Cybercriminals
12:25pm
Lunch Break
1:25pm
Gold Coast
Critical Links: Strategic and Technical Risk Assessment of Pacific Submarine Cable Infrastructure
Surfers Paradise
Threat Intelligence for Smarter Risk Reduction
2:10pm
Southport
Skateboarding, Skydiving, Security – What can we learn from Extreme Sports?
Gold Coast
Under the Hood: The Battle for Security, Safety & Privacy in a Connected Vehicle World
Surfers Paradise
Hunting Nation-State APTs in Telecommunications Networks: Intelligence Lessons from the Front Lines
2:55pm
Southport
From Zero to Global: A Founder's Journey in Building a Successful Cybersecurity SaaS Company
Gold Coast
Ready Player Three: Trawling telegram for threat intelligence
Surfers Paradise
The real state of North Korea's employment fraud operations in Australia.
Coolangatta
The Ghost in the Machine: AI Automated Attacks From Inside & Out
3:35pm
Afternoon Tea Break
4:00pm
Plenary
Scaling Capability or Scaling Risk? A Look at AI at the Coalface
4:30pm
Plenary
The Honest Debrief: What It Actually Takes to Evolve Security for the AI Era
Andrew Philp, Scott Hawkins, Ben Laker
5:00pm
Various - invite only
Birds of a Feather sessions
6:30pm
Garden Kitchen & Bar lawn
Pre-dinner drinks - AUSCERT2027 Gala Dinner
9:00am
9:05am
Plenary
iTnews State of Security Report 2027
9:15am
Plenary
Beyond the Perimeter: Navigating Identity Exploitation in the Age of AI
9:35am
10:05am
Plenary
Offensive security: Walking the fine red (team) line
10:25am
Morning Tea Break
11:00am
Southport
AUSCERT Cyber Leadership Network (CLN)
Gold Coast
Why Quantum Cryptanalysis is Bollocks
Surfers Paradise
ProfileHound: BloodHound collector for user profiles stored on machines
11:40am
Southport
The Referee’s Playbook: Avoiding the Red Card ($5.8M Fines) and the Sin Bin
Gold Coast
Building Your First Operational Technology (OT) Incident Response Plan
Surfers Paradise
Achievement Unlocked: Two Decades of Phishing Research
12:20pm
Southport
Co-op Mode: Levelling Up Supply Chain Resilience
Gold Coast
Gaining a Cognitive Edge: Smart Esports (AI and Cyber) for High-Performance Team Training
Surfers Paradise
AI In Bug Bounty @ GitLab: The Good, The Bad, and The Extreme
Coolangatta
To be announced
1:00pm
Lunch Break
2:00pm
Southport
The Accidental Security Architect (and why that needs to change)
Gold Coast
How To Replace Your People With AI
Surfers Paradise
Build your own Potato - An exploration of how Windows authentication abuse “actually works”
Coolangatta
To be announced
2:40pm
Southport
Game On! Inside the Program Committee: What Makes a CFP a Winner
Gold Coast
Project Kitsune: The Agentic AI SOC Analyst That Never Sleeps (and Rarely Complains)
Surfers Paradise
Why I created OpenSourceMalware (right here on the Gold Coast!)
Coolangatta
To be announced
3:15pm
Afternoon Tea Break
3:45pm
Plenary
the AUSCERT Speed Debate 👏