KEYNOTE: Thai Duong & Bruce Dang BSides Canberra 2026

Thai Duong was born in Saigon and grew up on the Internet. He spent most of his adult life breaking things for a living. He was at Google, where he worked on security and cryptography, helping create ...

cfp.bsidescbr.com.au

From Padding Oracle to Shell: Unauthenticated RCE in Telerik UI for ASP.NET BSides Canberra 2026

Progress Telerik UI for ASP.NET AJAX ships in thousands of enterprise web applications. Every control in the library protects its server communication using AES-CBC encryption with a separately manage...

cfp.bsidescbr.com.au

BSides Canberra 2026

Get tickets on Humanitix - BSides Canberra 2026 hosted by BSides Canberra. National Convention Centre Canberra, 31 Constitution Ave, Canberra ACT 2601, Australia. Thursday 24th September 2026. Find ev...

events.humanitix.com

Careers Village BSides Canberra 2026

Whether you're just starting out in cybersecurity, looking for your next opportunity, or curious about where the industry can take you, the Careers Village is designed to help. Curated and presented ...

cfp.bsidescbr.com.au

OT / ICS Security Day 1 BSides Canberra 2026

## What You'll Experience • Hands-on simulations and learning experiences to inspire and equip newcomers entering or advancing in OT/ICS and Space Cybersecurity. • Real physical kits that bridge the ...

cfp.bsidescbr.com.au

Hardware Village (Day One) BSides Canberra 2026

Step away from the keyboard – it’s time to get hands-on. Whether you're a seasoned tinkerer or just curious about what’s inside your badge, the Hardware Village is your space to learn, hack, solder, a...

cfp.bsidescbr.com.au

Black Bag "TERMINAL MISALIGNMENT" - Day 1 BSides Canberra 2026

*Muffled intercom announcement*: "Bravo Five One, You are cleared to enter the SSOE. You have fifteen minutes before SCLU's Recognisers find your session and derez you. Good luck. Our future is in yo...

cfp.bsidescbr.com.au

Black Box Zero - Physical Challenge Box BSides Canberra 2026

Hello! Black Box Zero is a three stage physical challenge box that gets participants to solve ciphers, hack webapps, and learn to read/write NFC tags to unlock the final box. The brains are driven by ...

cfp.bsidescbr.com.au

Locksport (Day 1) BSides Canberra 2026

The Locksport village is your gateway into the fascinating world of physical security. Whether you're a total newcomer or a seasoned picker, there's something here for everyone. Explore a wide variet...

cfp.bsidescbr.com.au

Software Supply Chain Threat Intelligence: Hands-On Training for SecOps and Threat Hunting Teams BSides Canberra 2026

Software supply chain attacks have become one of the most significant threats to organizations, with nation-state actors like DPRK's Lazarus Group actively compromising NPM packages, PyPI libraries, G...

cfp.bsidescbr.com.au

Escalating XSS into session hijacking in modern SSO ecosystems BSides Canberra 2026

Finding an XSS and getting alert(1) to fire is one thing. Turning it into something a program or a client treats as high impact is another, and often the trickier part. A reflected or stored XSS on a ...

cfp.bsidescbr.com.au

Kubernetes Capture the Flag BSides Canberra 2026

Delve deeper into the dark and mysterious world of Kubernetes security. Start your journey deep inside the target infrastructure, collecting flags as you exploit your position in the environment and h...

cfp.bsidescbr.com.au

From Copilot to Commander: Building Agentic AI for Security Investigations BSides Canberra 2026

A hands-on 8-hour workshop on building AI systems that run real security investigations - not just isolated copilot tasks. Most teams get useful help from Claude or ChatGPT on single questions. Few ca...

cfp.bsidescbr.com.au

Friday Night Networking Event BSides Canberra 2026

Our legendary BSides Canberra Friday Night Networking Party is back, and so are the live performances! After an incredible night last year, YTCracker, int eighty and DNZ are returning to the stage fo...

cfp.bsidescbr.com.au

https://cfp.bsidescbr.com.au/bsides-canberra-2026/schedule/

BSides Canberra 2026 Get different formats: curl https://cfp.bsidescbr.com.au/bsides-canberra-2026/schedule/\?format=table (default) curl https://cfp.bsidescbr.com.au/bsides-canberra-2...

cfp.bsidescbr.com.au

Assistance Program | BSides Canberra IX

Sponsors and supporter information for BSides Canberra IX.

bsidescbr.com.au

[un]prompted.au — AI × Cybersecurity Conference · Sydney, 18–19 September 2026

Notes from the field: vulnerability researchers, exploit developers, and frontier-AI-lab researchers on how AI is reshaping security research. ILUMINA, Sydney.

unprompted.au

Watch Your Language: A Multi-Lingual Approach to Bypassing Email Filters BSides Canberra 2026

_Modern email filters use a number of metrics to determine whether an incoming email is likely to be spam, including language, link/attachment analysis and sender details. For an ordinary sender, it m...

cfp.bsidescbr.com.au

Reverse Engineering Games. Common methods and traps for devs. BSides Canberra 2026

Why do people spend years of their lives painstakingly recreating the source code of a 20-year-old video game? While the motivation is often nostalgia or speedrunning, the techniques used are the gold...

cfp.bsidescbr.com.au

WebKit Archaeology: Finding Treasure in the Past BSides Canberra 2026

Starting security research into modern platforms that have been around for a while can be extremely daunting. Getting your foot in the door and beginning to understand the system and its components is...

cfp.bsidescbr.com.au

Whaling on mobile apps with Leviathan BSides Canberra 2026

Mobile pentesters don't have a tooling problem. They have five tools and many problems. Between Frida, decompilers, instrumentation bridges, and platform-specific utilities, practitioners end up conte...

cfp.bsidescbr.com.au

Tearing Down a DPRK-Linked macOS Crypto Stealer BSides Canberra 2026

This talk presents a technical analysis of a multi-stage macOS attack chain attributed with moderate-high confidence to the Lazarus/BlueNoroff cluster, targeting cryptocurrency users across a broad ra...

cfp.bsidescbr.com.au

Exploiting the Microsoft 365 Substrate: How their OAuth Clients Became an MFA Bypass Across Enterprise Tenants BSides Canberra 2026

Every time you sign in to Microsoft 365, a quiet exchange happens behind the scenes. Entra ID issues a token, and a sprawling backend known as the Microsoft 365 Substrate decides what that token is al...

cfp.bsidescbr.com.au

Testing Second-Order Prompt Injection Across AI Agent Deployments BSides Canberra 2026

Direct prompt injection is well understood. An attacker controls the input, inserts a payload, and the model executes it. Second-order injection works differently. The malicious payload does not come ...

cfp.bsidescbr.com.au

How to hack a quantum system BSides Canberra 2026

Quantum technologies are coming, with major advances over the last couple of years making them closer than ever. In the security community, this often leads to discussions about how a quantum computer...

cfp.bsidescbr.com.au

AIxploit: Reliable Prompt Injection Exploits Against Database-Enabled AI Agents BSides Canberra 2026

AIxploit: Reliable Prompt Injection Exploits Against Database-Enabled AI Agents Most prompt injection demos work once and fail the next — LLMs are stochastic, and a prompt that fires today may not fi...

cfp.bsidescbr.com.au

Ares: decompiling React Native bytecode bundles BSides Canberra 2026

React Native mobile applications bundle JavaScript application logic in compiled Hermes bytecode form, with a notable lack of open-source decompilers. In this talk, the decompiler and analysis tool Ar...

cfp.bsidescbr.com.au

Attacking Passkeys: Offensive Tooling and Implementation Vulnerabilities BSides Canberra 2026

Passkeys are showing up everywhere, but how many people can actually say how they work, where they break, or how to test one? We'll start with a Passkey 101: what FIDO2, WebAuthn and CTAP actually ar...

cfp.bsidescbr.com.au

Troubleshooting to SYSTEM: Local Privilege Escalation in Windows Diagnostics BSides Canberra 2026

Windows Diagnostics is easy to overlook. To most users it appears as a combination of troubleshooters and recovery actions that sometimes solve problems. Under the hood is a privileged automation fram...

cfp.bsidescbr.com.au