"Kerberoasting in C#: An OPSEC Perspective" Jayden Caelli breaks down how Kerberoasting works in .NET, how defenders detect it, and how to build stealthier tooling to bypass those detections. Offensive tradecraft meets detection evasion. Details: cfp.bsidescbr.com.au/bsides-canberr…

"Writing Windows Unit Tests: Telemetry bugs are security vulnerabilities too" John Uhlmann reveals how flaws in Windows kernel telemetry can hide security risks, and why unit tests help fix them. Details: cfp.bsidescbr.com.au/bsides-canberr…

"Developers: the weakest link in the supply chain?" From the xz backdoor to holes in common tools, David Leadbeater explores trust in open source, and how developer tooling can be a surprising attack surface. cfp.bsidescbr.com.au/bsides-canberr…

"From Sandbox Escapes to MCP Database Hijacks: Unveiling Agentic Vulnerabilities" Sean Park unveils real-world agentic AI vulnerabilities from a year of red teaming LLMs like GPT-4o. Don’t miss this one. cfp.bsidescbr.com.au/bsides-canberr…

"Primitives for Security Audits: Lessons from Jakarta Mail" Jia Hao Poh explores how inconsistent email parsing in Jakarta Mail & Spring can lead to surprising vulns, and useful primitives for security audits. cfp.bsidescbr.com.au/bsides-canberr…

"n00bing my way through circuit board design" Magic smoke, rookie mistakes, and a working PCB (hopefully). Join Edward Farrell as he dives into his chaotic journey from clueless to creating hands-on training tools for students. cfp.bsidescbr.com.au/bsides-canberr…

"Unbreaking the iPhone: Bootchain Reversal, SEP Sabotage & the iOS Kernel Frontier" Think iOS is unbreakable? Jack Sessions dives into bootchain reversal, SEP sabotage & GPU vulns, mapping the frontier of iOS exploitation, even post-checkm8. cfp.bsidescbr.com.au/bsides-canberr…

"My First Phish: The SAIGA Saga" What happens when you don’t stop at the first IOC? Justin Soyke dug deep into a phishing-as-a-service group, and they shut down days after he published. Opsec fails, source code gems, and the power of persistence. cfp.bsidescbr.com.au/bsides-canberr…

"What I Learnt From My North Korean Penpal" Think DPRK cyber campaigns are just hype? Think again. Patrick Delaney slid into Discord DMs and job apps to uncover fresh infrastructure, evolving TTPs, and real risks to orgs. cfp.bsidescbr.com.au/bsides-canberr…

"Modern Identity Providers Under Attack" Attackers are skipping passwords and going straight for your IdP. Anurag Khanna breaks down real-world tactics, detections, and defences for Entra ID, Okta, AWS, ADFS & more. cfp.bsidescbr.com.au/bsides-canberr…

"Catching WordPress 0-Days on the Fly" What if you could spot WordPress plugin vulns the moment devs push code? Ananda Dhakal & Rafie Muhammad share how they built a tool to detect 0-days in real-time using static analysis and SVN monitoring. cfp.bsidescbr.com.au/bsides-canberr…

"I'm in." Hollywood hacking: real techniques or just good lighting? Join Richard Appleby as he breaks down iconic movie hacks: what’s real, what’s not, and what it means for cyber. cfp.bsidescbr.com.au/bsides-canberr…

"Floating on Cloud Crime" Cybercriminals are selling stolen credentials on Telegram via subscription-based “clouds” of data. Liv Rowley explores the structure of these marketsand how Telegram fuels this growing threat. cfp.bsidescbr.com.au/bsides-canberr…

"The Hero’s Skip and the Hacker’s Leap" Luke Wurst explores how a whimsical game bug reveals serious vulnerabilities in modern systems. cfp.bsidescbr.com.au/bsides-canberr…

Volunteer applications for BSides Canberra 2025 are now open! We’re looking for help with regulators (mic running, door management), the Locksport Village, and Hardware Hacking Village. Apply now: forms.gle/yRPbaTmZ6TqP6X… Closes in 2 weeks or when full.

The BSides Canberra 2025 Assistance Program is now open! If you're based in Australia or NZ, over 18, and facing financial barriers to attending, we’d love to support you. Applications close 14 August: forms.gle/EvVaGPGbMGnhfy… Thanks to our generous donors! bsidescbr.com.au/assistance.html

"WTF is a TLA?" is Cyber Buzzword Bingo at its finest. Five minutes of jargon, sarcasm, and the phrases we all pretend to understand delivered by Jeremy Keast. cfp.bsidescbr.com.au/bsides-canberr…

"MISSION ASSURANCE: Beyond the Military Context" Theresa Sobb shows how mission assurance can strengthen civilian cyber ops—from transport to healthcare. cfp.bsidescbr.com.au/bsides-canberr…

Volunteer applications for BSides Canberra 2025 are now closed, huge thanks to everyone who applied! If you missed out, we’ll reopen for BSides Canberra 2026 on 1 August next year.

Right after the keynote at #BSidesCbr: "Intro to CTF" with the legendary Cybears 🐻💜 After 4 years running our ultra-competitive CTF, they’re retiring… but not before showing you how to get started. Come say hi & thanks! cfp.bsidescbr.com.au/bsides-canberr…