Social engineering is a growing threat in today's digital world, where attackers use psychological manipulation to gain access to sensitive information. This talk will explore the mindset behind social engineering, and discuss how attackers use deceptive tactics to gain trust and access. Javvad will examine the various motives behind these attacks and how attackers use psychological techniques to gain access. Javvad will also look at how to recognize and protect yourself from social engineering attacks, as well as how to create a culture of awareness and prevention in your organisation.

By understanding the psychological elements of social engineering, we can better protect ourselves and our organisations from these threats.

Tom Egglestone, using data from Resilience’s October 2023 claims report, would discuss the finding that third-party attacks were the biggest cause of claims in Q2 2023, going ahead of phishing for the first time following the MOVEit breach. This allows malicious actors to scale their attacks and impact more companies – a return to ‘big-game hunting’ tactics that prioritise bigger targets for maximum impact. Tom will highlight how to properly manage third-party vendor risk in today’s evolving threat landscape, and how this continues to shape cybersecurity trends in 2024.

- How Cloud technology can streamline UK businesses
- Integration of Cloud with unified systems
- How Cloud can work with IoT Cloud and sustainability

Security copilot launches an overview on how your business can leverage the application and how it can help address the cyber security talent gap.

In a rapidly advancing landscape of cyber and physical security, the presentation explores the evolution of attackers and raises a critical question: Have our defenders adapted accordingly? Delving into the intricacies of modern threats, the talk aims to dissect the dynamic nature of attacks, emphasising the urgency for organisations to relook at their security measures. Through a comparative analysis of evolving attack methodologies and defence strategies, the presentation navigates the complex intersection of cyber and physical security, offering insights to empower defenders in the face of increasingly sophisticated threats.

• During this presentation Katie will look at the intricacies of modern threats.

• Katie will explore the practical challenges organisations face when it comes to security.

• Katie will share actionable advice on adapting and strengthening your defence strategies to protect yourself and your organisation.

In today's complex world, organizations are challenged to modernize their network and improve their security posture at the same time in order to support and enable the digital transformation for the business. Open Systems can support customers through this transformation with a network and security service approach that's fully managed, platform-agnostic and improving Zero Trust maturity - all while providing the best customer experience in the industry.

In a world where anyone can create successful malware or have AI generate it for them, it's important to know how malware can be successful so you can better defend. Starting from a default-deny posture, learn how adopting Zero Trust principles can keep your data safe and operations running regardless of hacking attempts by man or machine.

Seb will be talking about the role of leadership and organisational change when it comes to implementing successful DevSecOps. 

Society forced onto technology without being empowered to be safer online, the societal oversight which has evolved into the society failing which is fuelling and facilitating a trillion dollar economy.

Mike will be debunking the myths and discussing what has changed. Roadmap to compliance. 

This talk delves into the intricate intersection of data sovereignty, security telemetry, and Governance, Risk, and Compliance (GRC), empowering you to maintain autonomy over your most valuable intel and navigate compliance complexities.

• Current Board make-up
• Skills on Boards
• Common perceptions of Boards
• How not to try and persuade Boards
• More successful approaches
• Where to get helps

Ever wonder if your penetration tests are missing something crucial? Let's face it, real attackers aren't just hacking your systems; they're targeting your team, often exploiting human error to find a way in. 

Street infrastructure is now being fitted with sensors that gather data about traffic, pedestrians, and the environment within which the public services operate.  This smart street ecosystem is also referred to as connected places. This research initially explored how the integrated smart infrastructure services rolled out by local authorities (through private operators) are changing the criminal and security landscape. It then deep dived using smart EV charging case study, into whether the current procurement process enables the local authorities to utilise NCSC connected place principles for cybersecurity to minimize cyber risks of the connected place ecosystem. The research highlights the gap in national policy to protect national essential services and local implementation for systemic events.

This presentation presents a new framework for analysing the cognitive effects of cyber operations. It establishes what is meant by cognitive in a cyber context, how different cognitive functions and processes might be affected by cyber operations, and potential impact of UK cognitive cyber operations on malicious state actors. The presentation will highlight the potential for cognitive cyber operations to enhance cyber deterrence and associated ethical and normative concerns around cognitive manipulation.  

In a world more distracted than ever, having a strong cyber mindset is paramount when it comes to high performing cyber teams and ensuring a powerful human firewall. 

The presentation will explore the vital principles of integrating security into the fundamental structure of SMEs. Embracing a 'Secure by Design' approach, attendees will gain insights into tangible examples of improved cybersecurity measures and a deeper comprehension of the consequential impacts on social and economic dimensions. The emphasis will be on equipping SMEs with the tools to fortify their resilience against evolving threats, including those posed by AI, and understanding how these efforts contribute to the overall societal and economic welfare.

A lively panel discussion focusing the importance of building cyber defence into the core of every business by using short courses to upskill your team to increase both technical skills and cyber awareness. 

As generative AI proliferates across business applications, we must first understand how it can be exploited by malicious actors. This discussion dives into techniques for subverting and extracting sensitive data from LLM-enabled applications, frameworks for understanding these risks, and adapting security teams' skillsets to tackle these new risk vectors.

Every reported breach has by definition circumvented existing security measures. Planning to protect alone is insufficient; we must be breach-ready. In this session, Kevin will look at measurably reducing the internal attack surface and blast radius, containing an initial compromise, and preventing the spread of ransomware or unauthorised activity. 

This talk will provide a general overview of cybercriminal forums, how they work, what’s on them, and why cybercriminals like to use them. There will be a particular focus on the Russian-language scene, and how it differs from its English-language counterpart. Roman will also cover how cybercriminal forums fit into the ransomware-as-a-service scene.

This talk will provide a general overview of cybercriminal forums, how they work, what’s on them, and why cybercriminals like to use them. There will be a particular focus on the Russian-language scene, and how it differs from its English-language counterpart. I will also cover how cybercriminal forums fit into the ransomware-as-a-service scene.

As the cybersecurity landscape continues to evolve with new threats emerging constantly, IT leaders face the critical task of prioritizing budgets and resources effectively to safeguard their organisations. This speaking session offers invaluable insights into navigating this dynamic environment, with a focus on bolstering cyber resilience.

In 2022 a group of suspected North Korean hackers broke into a Vietnamese video game. At $625m, the haul was a serious contender for the largest single theft in history. It was certainly the fastest - the money was spirited away in under two minutes. As the thieves raced to launder the loot, they inadvertently triggered a battle royale between financial regulators, law enforcement, free speech advocates and crypto bros. 

In the ongoing battle against cyber threats, defenders are now wielding AI as a formidable weapon and a ‘force multiplier’. By harnessing its capabilities, defenders can gain the upper hand, swiftly identifying and neutralising malicious activities. Through AI-driven analysis and proactive measures, we can turn the tables on attackers, safeguarding digital assets and thwarting their advances.

If the internet is the new high seas of commerce are cyber criminals sheltering within nation-states borders the 20th century brethren of their 18th century ancestors? There are some startling parallels between the emergence and development of Pirate culture, nation state rivalries of long ago and the modern cyber-crime or advanced persistent threat groups of today. Join Ian Thornton-Trump, CISO for Cyjax as he charts a historical and likely hysterically funny look at piracy on the high-seas and how nation states hunted those scallywags to extinction. Arr.

Drive action and change in the security world. Changing technology and processes starts with energising and inspiring your stakeholders to take action.
In this session, we'll cover how to build relevant, compelling, and emotionally engaging content that sparks action from your message. Learn how to make the complex simple, tell stories, and lead the charge for change in the cyber world. 

- You face more risks to your business than ever before – how can you measure those risks and understand where they are? 
- You have to work with your board on risk – how can you improve your communication with them to reduce risk effectively?
- You have to eliminate risks faster – how can you automate your remediation processes to achieve this in practice?

Over the last year, the professionalisation of the cybersecurity industry has progressed in leaps and bounds as the UK Cyber Security Council continues to develop Chartership pathways for individuals. But what does that mean for someone entering the industry? How can we join the dots so that graduates can see a clear pathway instead of a confusing mess of certs, training, and inaccurate recruitment ads? And how will professionalisation help to encourage more people into this industry, providing a solution instead of yet another problem? 

• What we have learned and a look forward to opportunities later this year
• Why the global geopolitical environment will continue to impact the cyber environment
• .Truths and myths around cyber