That’s a wrap on CRESTCon Australia 2025!
This event brought together Members, students, government officials, practitioners, and cyber leaders from across Australia and the wider Asia–Pacific region for a day of knowledge sharing, technical insight, and collaboration.
Our thanks to Lukasz Gogolkiewicz for expertly hosting as Master of Ceremonies, to our speakers for their valuable contributions, and to our delegates for their active participation. We are especially grateful to our Australasia Council, the driving force behind CRESTCon’s growth, along with our Asia Pacific Director, Nigel Phair, and Australasia Council Chair, Chathura Abeydeera GAICD, for their dedicated leadership. A special thank you also goes to our sponsors, McGrathNicol, Triskele Labs, and OffSec, for their support.
Our mission is to lead the cybersecurity community in raising standards across service providers and professionals, ensuring quality assurance in the sector, and providing confidence to the buying community, government, and regulators. CRESTCon Australia is a clear reflection of this mission in action.
Thank you to everyone who attended #CCAU25. We look forward to building on this momentum into 2026.
Post-event resources
2025 Agenda
08:00 – 09:00 Registration and Coffee
09:00 – 09:10 Introduction and Welcome: Lukasz Gogolkiewicz, Master of Ceremonies, Accent Group
09:10 – 09:20 An update on CREST activities: Nigel Phair, Director Asia Pacific, CREST
09:20 – 10:00 Beyond the Breach: Uncovering the Untold Lessons from Australia’s Cyber Crises: John Karabin and Jesse Pearce, McGrathNicol.
10:00 – 10:30 Flowcharts of doom: Mapping adversary behaviour like a threat artist: Jayant Kripalani, Senior Security Solution Architect, Cisco.
10:30 – 11:00 Morning tea
11:00 – 11:30 Security threats from quantum computing – a realistic assessment of the threat, lessons from real-life experience and practical advice: Rajiv Shah, Managing Director, MDR Security
11:30 – 12:00 Attacking SAML in 2025: Louis Nyffenegger, CEO, PentesterLab
12:00 – 12:30 From Alarm to Authority: Restoring Integrity in “Cybersecurity Research”: Edward Farrell, CEO, Mercury Information Security Services
12:30 – 13:30 Lunch
13:30 – 14:00 Echoes of Deception: War Stories from the Red Teaming Deepfake Attacks: Tim Dillon, APAC Market Leader, NCC Group
14:00 – 14:30 The Rise and Fall of RansomHub: Lessons from the FY25 Frontline: Nick Thanos, Senior DFIR Analyst & Craig Martin, Head of Incident Response, Triskele Labs.
14:30 – 15:00 Afternoon tea
15:00 – 15:30 Evolution of Red Teaming Windows Domains to the Cloud: Lloyd Simon, Co-Founder, Tanto Security
15:30 – 16:00 Pig Butchering Scams: A Personal Story and Global Threat: Daisy Wong, Head of Security Awareness, Medibank
16:00 – 16:20 Closing remarks: Lukasz Gogolkiewicz
16:20 Networking drinks