24-26th September 2026 https://bsidescbr.com.au/https://bsky.app/profile/bsidescbr.bsky.socialhttps://bsky.app/profile/bsidescbr.bsky.social/post/3mu6oy7ekfk2mOur final keynote for BSides Canberra 2026: Professor Richard Buckland. For over 20 years, Richard has trained highly sought-after cyber attackers and defenders, teaching nearly 20,000 students face-to-face and hundreds of thousands online. https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/VTKQH7/29 Aug 2026 01:10 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3mu6oy7ekfk2mhttps://bsky.app/profile/bsidescbr.bsky.social/post/3mti4kzkjsk2hWe're excited to welcome @chompie.rip back to BSidesCbr After keynoting two years ago, she's back with: "Building an Autonomous N-day Exploit Generation Pipeline" Pwn2Own winner. Leader of IBM X-Force Offensive Research. https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/TFBH8S/20 Aug 2026 01:42 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3mti4kzkjsk2hhttps://bsky.app/profile/bsidescbr.bsky.social/post/3mtfepw5rok2hAnnouncing our next keynote: Thai Duong & Bruce Dang. From BEAST, CRIME & POODLE to security roles at Google, Microsoft & Apple, they've helped shape modern cybersecurity. Now at Calif, they'll bring their perspective on AI security to BSidesCbr https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/YAHFRP/18 Aug 2026 23:30 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3mtfepw5rok2hhttps://bsky.app/profile/bsidescbr.bsky.social/post/3mtcqq7yecc2hExcited to welcome Renaud Feil as a keynote speaker at BSidesCbr Co-founder & CEO of Synacktiv, Renaud leads one of the world's offensive security companies. In Keep Calm. Hack On, he'll explore what AI has changed in offensive security and what it hasn't. https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/XUPMKU/17 Aug 2026 22:27 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3mtcqq7yecc2hhttps://bsky.app/profile/bsidescbr.bsky.social/post/3msudxi5bqs2hWe said all our talks were announced... but there was one we couldn't tell you about yet. "From Padding Oracle to Shell" Marcio Almeida takes us through multiple unauthenticated RCE paths discovered during coordinated disclosure. https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/RHLJ3X/12 Aug 2026 05:01 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3msudxi5bqs2hhttps://bsky.app/profile/bsidescbr.bsky.social/post/3msubwksu4c2hOkay, we think we've finally told you almost everything happening at BSidesCbr 2026. Talks. Training. CTFs. Villages. Hardware hacking. Locksport. Challenges. Friday night party. If you've been waiting to see what's on before grabbing a ticket... now you know. https://events.humanitix.com/bsides-canberra-202612 Aug 2026 04:25 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3msubwksu4c2hhttps://bsky.app/profile/bsidescbr.bsky.social/post/3msublt6dgs2hThe Careers Village returns for BSides Canberra 2026! Hosted by Ricki Burke, drop in for talks, workshops & conversations about building and navigating a career in cybersecurity. There's already plenty on the program - with more still to come. https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/NN99FA/12 Aug 2026 04:19 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3msublt6dgs2hhttps://bsky.app/profile/bsidescbr.bsky.social/post/3msuazg7tkc2hNEW for 2026: OT/ICS & Space Cybersecurity joins our Hardware Village! Get hands-on with PLCs, SCADA, industrial networks, satellite comms, GNSS spoofing & more with Gagan Singh Thenua, Sanam Makadia and Kanik Sachdeva. Real hardware. Real physical outcomes. https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/S8887G/12 Aug 2026 04:08 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3msuazg7tkc2hhttps://bsky.app/profile/bsidescbr.bsky.social/post/3msuausxxbk2hA BSidesCbr mainstay for all 12 years: the Hardware Village! Grab your electronic badge, find a soldering iron & get building. Beginners welcome and our volunteers will help. Just use the buckets for your trimmings. And please stop burning our tablecloths. https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/CKHTDK/12 Aug 2026 04:06 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3msuausxxbk2hhttps://bsky.app/profile/bsidescbr.bsky.social/post/3msua3k6hbc2hBlack Bag is BACK for its 4th year! A BSides Canberra crowd favourite that somehow gets bigger, stranger & better every year. This year: TERMINAL MISALIGNMENT. 15 minutes. Up to 8 people. Hack The Grid. Stop SCLU. Try not to get derezzed. https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/Z8EKP7/12 Aug 2026 03:52 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3msua3k6hbc2hhttps://bsky.app/profile/bsidescbr.bsky.social/post/3msrj6gzo2s2hAnd on Friday, something new is joining Locksport... Some awesome New Zealanders (Nathan & Bayley) are bringing Black Box Zero across the ditch! Solve ciphers, hack webapps & mess with NFC to work your way through a 3-stage physical challenge box. https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/UWEBSR/11 Aug 2026 01:56 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3msrj6gzo2s2hhttps://bsky.app/profile/bsidescbr.bsky.social/post/3msrirbg3ls2hIt wouldn't be BSides Canberra without Locksport. For 12 years, our Locksport Village has been a conference mainstay. Our collection of locks gets hauled out by volunteers every year for 3 full days of picking, learning & challenges. https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/CFPTRQ/11 Aug 2026 01:49 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3msrirbg3ls2hhttps://bsky.app/profile/bsidescbr.bsky.social/post/3msrbmn7hp22hTraining announcement! "Software Supply Chain Threat Intelligence" Join Paul McCarty for hands-on analysis of real-world supply chain malware across NPM, PyPI, GitHub & VS Code - then put your new skills to work in a live hunting CTF. Sat 26 Sept | 9am–3:30pm https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/VVRUFE/10 Aug 2026 23:41 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3msrbmn7hp22hhttps://bsky.app/profile/bsidescbr.bsky.social/post/3mspinhrnps2hTraining announcement! "Escalating XSS into Session Hijacking in Modern SSO Ecosystems" Getting alert(1) is only the beginning. Join Animesh Acharya for a hands-on workshop on taking XSS further. Fri 25 Sept | 1:30–4:30pm https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/G9B7GT/10 Aug 2026 06:42 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3mspinhrnps2hhttps://bsky.app/profile/bsidescbr.bsky.social/post/3mspibvapts2hBack for its THIRD year! "Kubernetes Capture the Flag" returns to BSides Canberra with Mario Weigel. Get your own Kubernetes cluster and tackle 3 increasingly challenging scenarios. Fri 25 Sept | 9am–1pm https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/GY3NLF/10 Aug 2026 06:35 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3mspibvapts2hhttps://bsky.app/profile/bsidescbr.bsky.social/post/3msphwxdgek2hTraining announcement! "From Copilot to Commander: Building Agentic AI for Security Investigations" with Sindre Breda Spend a full day building, testing and improving an AI agent that can run real, multi-step security investigations. Thu 24 Sept | 10am–5pm https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/QWSKGN/10 Aug 2026 06:29 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3msphwxdgek2hhttps://bsky.app/profile/bsidescbr.bsky.social/post/3mspglwm4tk2hThey’re back! @ytcracker.bsky.social , @int0x80.com and dnz are returning to the stage for the BSides Canberra 2026 Friday Night Party. Nerdcore, hacker culture, cold drinks and one hell of a way to finish Friday at BSides Canberra. https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/LTMJNW/10 Aug 2026 06:05 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3mspglwm4tk2hhttps://bsky.app/profile/bsidescbr.bsky.social/post/3mspbjnn76k2hOur talks are all announced now - minus our exciting keynotes! And as for the training, events and villages… there’s so much still to announce, we don’t know where to start. Hold onto your seats. Things are about to get busy. https://cfp.bsidescbr.com.au/bsides-canberra-2026/schedule/10 Aug 2026 04:34 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3mspbjnn76k2hhttps://bsky.app/profile/bsidescbr.bsky.social/post/3msezfqt2x22qApplications for our 2026 Assistance Program are now open and close on 16 Aug. If financial hardship would prevent you from attending, we'd encourage you to apply. You can also still donate through our ticketing system to help others attend. Details: https://bsidescbr.com.au/pages/assistance.html06 Aug 2026 02:42 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3msezfqt2x22qhttps://bsky.app/profile/bsidescbr.bsky.social/post/3ms37sodi6s2qTravelling to Australia for BSides Canberra? You might want to arrive a little earlier. unprompted.au, a specialised AI security conference, is running the weekend before (18–19 September), making it easy to attend both events in one trip. Limited tickets left: unprompted.au https://unprompted.au02 Aug 2026 05:10 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3ms37sodi6s2qhttps://bsky.app/profile/bsidescbr.bsky.social/post/3mryu34hcec2q"Watch Your Language: A Multi-Lingual Approach to Bypassing Email Filters" Can changing the language of an email help it bypass spam filters? Sarah Lam explores a novel technique for confusing language analysis and improving email delivery. https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/S8P7XH/01 Aug 2026 06:35 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3mryu34hcec2qhttps://bsky.app/profile/bsidescbr.bsky.social/post/3mrytx6bke22q"Reverse Engineering Games: Common Methods and Traps for Devs" From Diablo to Zelda: Ocarina of Time, Luke Wurst explores the reverse engineering techniques behind classic game decompilation and how they apply to modern cybersecurity. https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/9GGE9D/01 Aug 2026 06:33 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3mrytx6bke22qhttps://bsky.app/profile/bsidescbr.bsky.social/post/3mrytser3522q"WebKit Archaeology: Finding Treasure in the Past" George Dan explores four iOS 6 WebKit vulnerabilities, how they led to Safari code execution, and what they can still teach us about modern browser security. https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/QUQEHA/01 Aug 2026 06:30 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3mrytser3522qhttps://bsky.app/profile/bsidescbr.bsky.social/post/3mrwdza5xys2q"Whaling on mobile apps with Leviathan" Luke Symons introduces Leviathan, a platform that streamlines Android and iOS security testing, with real-world examples and a live demo. https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/FPNKLY/31 Jul 2026 06:42 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3mrwdza5xys2qhttps://bsky.app/profile/bsidescbr.bsky.social/post/3mrwdw7soxk2q"Tearing Down a DPRK-Linked macOS Crypto Stealer" Tonmoy Jitu unpacks a Lazarus/BlueNoroff macOS campaign, from Gatekeeper bypasses to credential theft and an exposed C2 API that revealed the operators' workflow. https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/BPDAWE/31 Jul 2026 06:40 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3mrwdw7soxk2qhttps://bsky.app/profile/bsidescbr.bsky.social/post/3mrwdrtamic2q"Exploiting the Microsoft 365 Substrate" Can a trusted Microsoft OAuth client become an MFA bypass? Rawson Wade reveals an Important-rated Microsoft 365 vulnerability and the OAuth lessons every security engineer should know. https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/PZEVCX/31 Jul 2026 06:38 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3mrwdrtamic2qhttps://bsky.app/profile/bsidescbr.bsky.social/post/3mrqjac3mps2u"Testing Second-Order Prompt Injection Across AI Agent Deployments" Gaurav Vikash explores how AI agents can be compromised through malicious content hidden in documents, websites and tool outputs—and how to identify these architectural weaknesses. https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/NRAAFR/28 Jul 2026 23:00 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3mrqjac3mps2uhttps://bsky.app/profile/bsidescbr.bsky.social/post/3mrqj3undvk2u"How to hack a quantum system" Rajiv Shah explores how quantum technologies can be attacked, the threat models defenders should be preparing for, and what it will take to secure the next generation of quantum systems. https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/X7TQSB/28 Jul 2026 22:57 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3mrqj3undvk2uhttps://bsky.app/profile/bsidescbr.bsky.social/post/3mrqiyahecs2u"AIxploit: Reliable Prompt Injection Exploits Against Database-Enabled AI Agents" Sean Park introduces AIxploit, demonstrating reliable prompt injection attacks against AI agents connected to databases, documents and real backend systems. https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/FKH7PC/28 Jul 2026 22:55 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3mrqiyahecs2uhttps://bsky.app/profile/bsidescbr.bsky.social/post/3mroiu2rzzs2e"Ares: decompiling React Native bytecode bundles" Avery Artemis Pitt-Warddhana (nullableVoidPtr) introduces Ares, a new open-source Hermes bytecode decompiler, and explores the techniques behind reverse engineering React Native applications. https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/DYWETJ/28 Jul 2026 03:47 +0000at://did:plc:m7cpgvoeartq7lx36ppfc2d2/app.bsky.feed.post/3mroiu2rzzs2e