Up next
You’re probably here: Wesfarmers, G91
Talks, live on stage.
Keep it quiet for the speakers and pop your phone on silent.
Next door
The same talks, live on the big screen. Chat, hack, take a call, or bring the kids.
Capture the flag
Form a team of up to four, beginners and veterans alike.
Run by Emu Exploit. Scan to join, or head to ctf.emu.team.
Winners announced at Saturday’s closing ceremony.
Teams of up to four. Prizes for the top three and a trophy for the winners, announced at Saturday’s close.
Learn to pick locks with CyberCX. Beginners very welcome.
Solder up your badge, just outside the back doors.
Shirts and goodies from past years at the rego desk. Pay by card with a QR code.



Full code of conduct: bsidesperth.com.au/code-of-conduct.html
Brewed all day by Margaret River Roasting.
On us, thanks to elttam.
rok kombucha and Waves & Caves, from The Local Drinks Co.
Grab a refill whenever you need one.




Hardware and exploitation
| 9:00 | Welcome and opening | |
| 9:20 | AC/DC/RCE: From Bluetooth to Contactor | Brendan Scarvell |
| 10:10 | I Built a Tiny Passkey Authenticator, Then Had to Explain Why You Shouldn’t Trust It | George Coldham |
| 10:40 | Morning tea | |
| 11:00 | Go Foot, Meet Gun: Auditing the Go Ecosystem for Its Sharpest Edges | Zoltan Madarassy & Alex Brown |
| 11:50 | Springing Cats Together: Chaining Intended Behaviours into RCE | Chris Elliott |
| 12:20 | Lunch | |
| 1:20 | Dumpster Diving for AI Agent Data Leaks | Alexander Wilczek |
| 1:55 | To be announced | |
| 2:30 | The Ghosts of Protocols Past | Danielle Rosenfeld-Lovell |
| 3:00 | Viral Vulnerabilities: Unpacking Copy.Fail and Related Linux Kernel Bugs | Angus (InfoSect) |
| 3:50 | AI Security Q&A | Cole Cornford |
| 4:20 | Day 1 wrap-up |
Threat intel, defence and AI
| 9:00 | Day 2 opening | |
| 9:15 | Who is Igor Gilmutdinov? Using OSINT to Uncover the People Behind Russian Bulletproof Hosting | Rich S |
| 10:05 | Nobody’s Protocol: Attacking TACACS+ in 2026 | Matt Jones |
| 10:50 | Morning tea | |
| 11:10 | Purple Teaming yo ICS | Bruce ‘BFL’ Large |
| 11:55 | Lunch | |
| 12:55 | A Leukocyte For Supply Chain Attacks | Adam Brickhill |
| 1:40 | The Enemy Within: Running Untrusted Code Through AI Workloads | Kumar Soorya & Kaif Ahsan |
| 2:25 | A Fool’s Paradise: AI vs Humans | PS Sides (Year 6 students) |
| 2:40 | Closing ceremony, prizes and CTF results |
Scan for every talk, both days, with times and speakers.
bsidesperth.com.au/schedule
Tag @BSidesPer on X and BSides Perth on LinkedIn. Speakers and sponsors love a shout-out.