2.0 -//Pentabarf//Schedule//EN PUBLISH UPZFD7@@cfp.bsidescbr.com.au -UPZFD7 Opening Ceremony en en 20260924T090000 20260924T091000 001000

Opening Ceremony

PUBLIC CONFIRMED 25 Mins (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/UPZFD7/ Main Track Kylie McDevitt Dr Silvio Cesare PUBLISH VZENQH@@cfp.bsidescbr.com.au -VZENQH Thursday Keynote - TBA en en 20260924T091000 20260924T095000 004000

Thursday Keynote - TBA

PUBLIC CONFIRMED 55 minutes (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/VZENQH/ Main Track PUBLISH 8FNRMJ@@cfp.bsidescbr.com.au -8FNRMJ Viral Vulnerabilities: Unpacking Copy.Fail and related Linux Kernel bugs en en 20260924T110000 20260924T115500 005500

Viral Vulnerabilities: Unpacking Copy.Fail and related Linux Kernel bugs

PUBLIC CONFIRMED 55 minutes (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/8FNRMJ/ Main Track Angus PUBLISH E7QC78@@cfp.bsidescbr.com.au -E7QC78 Novel Router Emulation for Malware Reverse Engineering & Infrastructure Discovery en en 20260924T120000 20260924T122500 002500

Novel Router Emulation for Malware Reverse Engineering & Infrastructure Discovery

PUBLIC CONFIRMED 25 Mins (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/E7QC78/ Main Track Kendo PUBLISH CWSFLH@@cfp.bsidescbr.com.au -CWSFLH Azul: How to build “good” malware analysis platforms en en 20260924T133000 20260924T142500 005500

Azul: How to build “good” malware analysis platforms

PUBLIC CONFIRMED 55 minutes (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/CWSFLH/ Main Track James L PUBLISH MMAHSM@@cfp.bsidescbr.com.au -MMAHSM Let It Sync In en en 20260924T143000 20260924T145500 002500

Let It Sync In

PUBLIC CONFIRMED 25 Mins (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/MMAHSM/ Main Track Dylan Bradley PUBLISH EQ7PKG@@cfp.bsidescbr.com.au -EQ7PKG Password MisManagers: Hunting for Authentication Bypasses in Enterprise Password Managers en en 20260924T151500 20260924T161000 005500

Password MisManagers: Hunting for Authentication Bypasses in Enterprise Password Managers

PUBLIC CONFIRMED 55 minutes (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/EQ7PKG/ Main Track Aidan Stansfield PUBLISH MTNFGS@@cfp.bsidescbr.com.au -MTNFGS Unlimited Exploitation of Signed Windows Drivers en en 20260924T161500 20260924T171000 005500

Unlimited Exploitation of Signed Windows Drivers

PUBLIC CONFIRMED 55 minutes (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/MTNFGS/ Main Track Christopher Vella (Kharosx0) PUBLISH NN99FA@@cfp.bsidescbr.com.au -NN99FA Careers Village en en 20260924T100000 20260924T170000 070000

Careers Village

PUBLIC CONFIRMED Event https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/NN99FA/ Off-Main Track Ricki Burke PUBLISH ERKKBA@@cfp.bsidescbr.com.au -ERKKBA Speedrun CTF Qualifiers en en 20260924T100000 20260924T140000 040000

Speedrun CTF Qualifiers

PUBLIC CONFIRMED Event https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/ERKKBA/ Exhibition Hall toasterpwn PUBLISH 7EVT9P@@cfp.bsidescbr.com.au -7EVT9P Speedrun CTF Finale en en 20260924T140000 20260924T163000 023000

Speedrun CTF Finale

PUBLIC CONFIRMED Event https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/7EVT9P/ Exhibition Hall toasterpwn PUBLISH QWSKGN@@cfp.bsidescbr.com.au -QWSKGN From Copilot to Commander: Building Agentic AI for Security Investigations en en 20260924T100000 20260924T170000 070000

From Copilot to Commander: Building Agentic AI for Security Investigations

PUBLIC CONFIRMED Event https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/QWSKGN/ Murray-Fitzroy Room Sindre Breda PUBLISH Z8EKP7@@cfp.bsidescbr.com.au -Z8EKP7 Black Bag - Day 1 en en 20260924T100000 20260924T170000 070000

Black Bag - Day 1

PUBLIC CONFIRMED Event https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/Z8EKP7/ Derwent Room TBA PUBLISH CFPTRQ@@cfp.bsidescbr.com.au -CFPTRQ Locksport (Day 1) en en 20260924T100000 20260924T170000 070000

Locksport (Day 1)

PUBLIC CONFIRMED Event https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/CFPTRQ/ Locksport Village Volunteers PUBLISH CKHTDK@@cfp.bsidescbr.com.au -CKHTDK Hardware Village (Day One) en en 20260924T100000 20260924T160000 060000

Hardware Village (Day One)

PUBLIC CONFIRMED Event https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/CKHTDK/ Hardware Village Volunteers PUBLISH FYAJ8P@@cfp.bsidescbr.com.au -FYAJ8P Friday Keynote - TBA en en 20260925T091000 20260925T095000 004000

Friday Keynote - TBA

PUBLIC CONFIRMED 55 minutes (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/FYAJ8P/ Main Track PUBLISH GZAL9B@@cfp.bsidescbr.com.au -GZAL9B Doppelganger - Weaponizing CVE-2026-23066 at ZeroDay.Cloud en en 20260925T100000 20260925T105500 005500

Doppelganger - Weaponizing CVE-2026-23066 at ZeroDay.Cloud

PUBLIC CONFIRMED 55 minutes (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/GZAL9B/ Main Track Faraz PUBLISH LESWA7@@cfp.bsidescbr.com.au -LESWA7 Fatal Errors: Forensics Pitfalls in the "Mushroom Murders" Case Study en en 20260925T110000 20260925T115500 005500

Fatal Errors: Forensics Pitfalls in the "Mushroom Murders" Case Study

PUBLIC CONFIRMED 55 minutes (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/LESWA7/ Main Track Zoran Iliev PUBLISH KHLBMX@@cfp.bsidescbr.com.au -KHLBMX Chasing Shadows: Portable Memory Corruption in Ghostscript en en 20260925T120000 20260925T122500 002500

Chasing Shadows: Portable Memory Corruption in Ghostscript

PUBLIC CONFIRMED 25 Mins (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/KHLBMX/ Main Track Rick de Jager PUBLISH LFCLZK@@cfp.bsidescbr.com.au -LFCLZK [redacted] until 7Aug 2026 en en 20260925T140000 20260925T145500 005500

[redacted] until 7Aug 2026

PUBLIC CONFIRMED 55 minutes (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/LFCLZK/ Main Track PUBLISH ZREJ37@@cfp.bsidescbr.com.au -ZREJ37 Time Crisis: Exploiting time-based padding oracle vulnerabilities using Timeless Timing Attacks en en 20260925T151500 20260925T161000 005500

Time Crisis: Exploiting time-based padding oracle vulnerabilities using Timeless Timing Attacks

PUBLIC CONFIRMED 55 minutes (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/ZREJ37/ Main Track Justin Steven PUBLISH PZEVCX@@cfp.bsidescbr.com.au -PZEVCX Exploiting the Microsoft 365 Substrate: How their OAuth Clients Became an MFA Bypass Across Enterprise Tenants en en 20260925T100000 20260925T105500 005500

Exploiting the Microsoft 365 Substrate: How their OAuth Clients Became an MFA Bypass Across Enterprise Tenants

PUBLIC CONFIRMED 55 minutes (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/PZEVCX/ Off-Main Track Rawson Wade PUBLISH 3VQLVR@@cfp.bsidescbr.com.au -3VQLVR Find My... And Yours: Exploiting Tracker Ecosystems To Track Individuals en en 20260925T110000 20260925T115500 005500

Find My... And Yours: Exploiting Tracker Ecosystems To Track Individuals

PUBLIC CONFIRMED 55 minutes (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/3VQLVR/ Off-Main Track Carter Smith PUBLISH ZYRVZG@@cfp.bsidescbr.com.au -ZYRVZG Hooked: Tracking Linker and Generator Persistence on Linux en en 20260925T120000 20260925T122500 002500

Hooked: Tracking Linker and Generator Persistence on Linux

PUBLIC CONFIRMED 25 Mins (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/ZYRVZG/ Off-Main Track JasonTrapp PUBLISH QB3CLU@@cfp.bsidescbr.com.au -QB3CLU Inside of an Android en en 20260925T151500 20260925T161000 005500

Inside of an Android

PUBLIC CONFIRMED 55 minutes (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/QB3CLU/ Off-Main Track Aaron PUBLISH YDT9EC@@cfp.bsidescbr.com.au -YDT9EC Bark to the Future: Network Security with Wi‑Fido en en 20260925T161500 20260925T164000 002500

Bark to the Future: Network Security with Wi‑Fido

PUBLIC CONFIRMED 25 Mins (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/YDT9EC/ Off-Main Track Chewhacker PUBLISH 3BGZWM@@cfp.bsidescbr.com.au -3BGZWM From Dream Jobs to Developer Tokens: How North Korea-based threat actors abuse trust en en 20260925T164500 20260925T170000 001500

From Dream Jobs to Developer Tokens: How North Korea-based threat actors abuse trust

PUBLIC CONFIRMED 25 Mins (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/3BGZWM/ Off-Main Track Sohan Lokula PUBLISH HBTFRM@@cfp.bsidescbr.com.au -HBTFRM Capture-the-Flag (Day One) en en 20260925T100000 20260925T170000 070000

Capture-the-Flag (Day One)

PUBLIC CONFIRMED Event https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/HBTFRM/ Exhibition Hall skateboarding dog PUBLISH GY3NLF@@cfp.bsidescbr.com.au -GY3NLF Kubernetes Capture the Flag en en 20260925T090000 20260925T130000 040000

Kubernetes Capture the Flag

PUBLIC CONFIRMED Event https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/GY3NLF/ Murray-Fitzroy Room Mario Weigel PUBLISH G9B7GT@@cfp.bsidescbr.com.au -G9B7GT Escalating XSS into session hijacking in modern SSO ecosystems en en 20260925T133000 20260925T163000 030000

Escalating XSS into session hijacking in modern SSO ecosystems

PUBLIC CONFIRMED Event https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/G9B7GT/ Murray-Fitzroy Room Animesh Acharya PUBLISH XSJNE9@@cfp.bsidescbr.com.au -XSJNE9 Black Bag - Day 2 en en 20260925T090000 20260925T170000 080000

Black Bag - Day 2

PUBLIC CONFIRMED Event https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/XSJNE9/ Derwent Room TBA PUBLISH ESQF9W@@cfp.bsidescbr.com.au -ESQF9W Locksport (Day 2) en en 20260925T090000 20260925T160000 070000

Locksport (Day 2)

PUBLIC CONFIRMED Event https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/ESQF9W/ Locksport Village Volunteers PUBLISH UWEBSR@@cfp.bsidescbr.com.au -UWEBSR Black Box Zero - Physical Challenge Box en en 20260925T093000 20260925T163000 070000

Black Box Zero - Physical Challenge Box

PUBLIC CONFIRMED Event https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/UWEBSR/ Locksport Village - Physical Challenge Nathan Cobbald and Bayley Skerman PUBLISH CGFLPS@@cfp.bsidescbr.com.au -CGFLPS Hardware Village (Day Two) en en 20260925T090000 20260925T160000 070000

Hardware Village (Day Two)

PUBLIC CONFIRMED Event https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/CGFLPS/ Hardware Village Volunteers PUBLISH C7HSRZ@@cfp.bsidescbr.com.au -C7HSRZ Saturday Keynote - TBA en en 20260926T091000 20260926T095000 004000

Saturday Keynote - TBA

PUBLIC CONFIRMED 55 minutes (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/C7HSRZ/ Main Track PUBLISH 88SUTA@@cfp.bsidescbr.com.au -88SUTA javascript:pwn() - A Field Guide to Hacking ServiceNow en en 20260926T100000 20260926T105500 005500

javascript:pwn() - A Field Guide to Hacking ServiceNow

PUBLIC CONFIRMED 55 minutes (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/88SUTA/ Main Track Paul Alkemade PUBLISH V3BXU8@@cfp.bsidescbr.com.au -V3BXU8 OculaRCE: From Bluetooth to Contactor en en 20260926T110000 20260926T115500 005500

OculaRCE: From Bluetooth to Contactor

PUBLIC CONFIRMED 55 minutes (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/V3BXU8/ Main Track Brendan Scarvell PUBLISH LUJCEL@@cfp.bsidescbr.com.au -LUJCEL Waffling Around WAFs en en 20260926T120000 20260926T122500 002500

Waffling Around WAFs

PUBLIC CONFIRMED 25 Mins (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/LUJCEL/ Main Track Aeriana Lawler PUBLISH CWMDP3@@cfp.bsidescbr.com.au -CWMDP3 Finding vibe leaked API keys every day en en 20260926T133000 20260926T135500 002500

Finding vibe leaked API keys every day

PUBLIC CONFIRMED 25 Mins (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/CWMDP3/ Main Track "Alex" PUBLISH UGYDQS@@cfp.bsidescbr.com.au -UGYDQS Headless Hunter - Automated exploitation of headless Chrome using V8 n-days en en 20260926T151500 20260926T161000 005500

Headless Hunter - Automated exploitation of headless Chrome using V8 n-days

PUBLIC CONFIRMED 55 minutes (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/UGYDQS/ Main Track Daniel Cooper PUBLISH YXN8DD@@cfp.bsidescbr.com.au -YXN8DD You Get a C2! And YOU Get a C2!: The democratisation of sophisticated Command & Control en en 20260926T100000 20260926T105500 005500

You Get a C2! And YOU Get a C2!: The democratisation of sophisticated Command & Control

PUBLIC CONFIRMED 55 minutes (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/YXN8DD/ Off-Main Track Joseph Ganter Tom Marsden PUBLISH CNKXQT@@cfp.bsidescbr.com.au -CNKXQT Malicious Entra ID Apps - what they are, how to find them and how to stop them en en 20260926T110000 20260926T112500 002500

Malicious Entra ID Apps - what they are, how to find them and how to stop them

PUBLIC CONFIRMED 25 Mins (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/CNKXQT/ Off-Main Track Sam Brazier-Hollins PUBLISH YUZAQX@@cfp.bsidescbr.com.au -YUZAQX Venting Steam: Hunting C2 in Unexpected Places en en 20260926T113000 20260926T115500 002500

Venting Steam: Hunting C2 in Unexpected Places

PUBLIC CONFIRMED 25 Mins (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/YUZAQX/ Off-Main Track Mike Vriesema PUBLISH ASV3UJ@@cfp.bsidescbr.com.au -ASV3UJ Identity Is the New SOC: Hunting Entra, SCIM, PIM, and Password Manager Abuse en en 20260926T120000 20260926T122500 002500

Identity Is the New SOC: Hunting Entra, SCIM, PIM, and Password Manager Abuse

PUBLIC CONFIRMED 25 Mins (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/ASV3UJ/ Off-Main Track Maple PUBLISH UHLRLX@@cfp.bsidescbr.com.au -UHLRLX API Key Attribution Sucks, Lets Change That en en 20260926T133000 20260926T135500 002500

API Key Attribution Sucks, Lets Change That

PUBLIC CONFIRMED 25 Mins (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/UHLRLX/ Off-Main Track Luke Marshall PUBLISH TN98SC@@cfp.bsidescbr.com.au -TN98SC Just spoof the government? en en 20260926T140000 20260926T145500 005500

Just spoof the government?

PUBLIC CONFIRMED 55 minutes (including questions) https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/TN98SC/ Off-Main Track Ben™ PUBLISH RMC8LB@@cfp.bsidescbr.com.au -RMC8LB Capture-the-Flag (Day Two) en en 20260926T090000 20260926T150000 060000

Capture-the-Flag (Day Two)

PUBLIC CONFIRMED Event https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/RMC8LB/ Exhibition Hall skateboarding dog PUBLISH VVRUFE@@cfp.bsidescbr.com.au -VVRUFE Software Supply Chain Threat Intelligence: Hands-On Training for SecOps and Threat Hunting Teams en en 20260926T090000 20260926T153000 063000

Software Supply Chain Threat Intelligence: Hands-On Training for SecOps and Threat Hunting Teams

PUBLIC CONFIRMED Event https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/VVRUFE/ Murray-Fitzroy Room Paul McCarty PUBLISH JBCGY7@@cfp.bsidescbr.com.au -JBCGY7 Black Bag - Day 3 en en 20260926T090000 20260926T150000 060000

Black Bag - Day 3

PUBLIC CONFIRMED Event https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/JBCGY7/ Derwent Room TBA PUBLISH VDNHNZ@@cfp.bsidescbr.com.au -VDNHNZ Locksport (Day 3) en en 20260926T090000 20260926T153000 063000

Locksport (Day 3)

PUBLIC CONFIRMED Event https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/VDNHNZ/ Locksport Village Volunteers PUBLISH ES8WKY@@cfp.bsidescbr.com.au -ES8WKY Hardware Village (Day Three) en en 20260926T090000 20260926T153000 063000

Hardware Village (Day Three)

PUBLIC CONFIRMED Event https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/ES8WKY/ Hardware Village Volunteers