Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The Australian Essential Eight and the Information Security Manual (ISM) together define the cybersecurity baseline for organisations operating in Australia. While the ISM contains over 700 security controls, the Essential Eight distils the most critical of these into eight prioritised mitigation strategies and each strategy maps to multiple ISM controls underneath it. At the heart of both frameworks lies one recurring theme: restricting and governing privileged access and that's where privileged access management becomes your most powerful compliance lever.

AI is moving so fast that even security professionals feel they are staring over an event horizon without knowing what comes next. Public information alone is already unsettling, and the fear grows when you consider what is happening beyond open sources, from hidden capabilities to post quantum risk no one has fully mapped yet.

AI makes building look easy. That’s the trap. Without a secure, well-designed foundation, workflows break, costs spike, and systems grow fragile. CTOs and CISOs from leading organizations discuss what breaks without a secure foundation, and how to build AI systems that hold up at scale. This session goes deep on the real-world tradeoffs between speed, risk, and trust.

Every CISO is asking it: now that frontier models like Claude Mythos and ChatGPT 5.5 have real offensive cyber capability, are zero days surging? Host Tova Dvorin and SafeBreach offensive engineer Adrian Culley dig into the mid-2026 data—GTIG, Mandiant M-Trends, Rapid7, AISI—and find the curve moved in shape, not volume. Inside: the two AI "firsts" (Big Sleep and a 2FA-bypass exploit), why commercial spyware explains the rebound, the negative-seven-day time-to-exploit, and why defender deployment is the real bottleneck.