Published by AUSCERT
AUSCERT is Australia's pioneer Cyber Emergency Response Team, proudly a part of The University of Queensland. We help our members prevent, detect, respond and mitigate cyber-based attacks.
Listen on Apple Podcasts23 min
What happens when a power plant, train network or other critical infrastructure is targeted by a cyber attack? In this episode of Share Today, Save Tomorrow, Lesley Carhart shares what it's really like investigating cyber incidents affecting industrial systems, an area of digital forensics and incident response that few people ever get to see. Lesley discusses the different types of incidents impacting operational technology (OT) environments, from ransomware and insider threats to nation-state activity, and explains why understanding how systems fail is essential to building resilient critical infrastructure.
23 min
In this episode of Share Today, Save Tomorrow, AUSCERT’s Business Manager Bek Cheb sits down with one of the youngest voices in Australia's cyber security community, Somindu Abeydeera. What started with a lockpick set at six years old has grown into a passion for ethical hacking, conference speaking and continuous learning. Somindu shares how physical security sparked his interest in cyber security, why curiosity has been his greatest teacher, and how he made the leap from lockpicking competitions to presenting at industry events. The conversation also explores the importance of hands-on learning, the value of community, the future of cyber security for young people, and Somindu’s perspective on Australia's social media age restrictions.
28 min
Our new season of Share Today, Save Tomorrow kicks off with AUSCERT2026 keynote speaker Dr. Kawin Boonyapredee. Hosted by our General Manager, Ivano Bongiovanni, this episode explores how Kawin’s journey as a seasoned CISO and cyber security researcher translates into real-world security outcomes. The conversation also dives into the growing impact of quantum computing on cyber security, the value of bridging academic research with industry practice, and how cultural differences influence the way security professionals communicate and collaborate around the world.
23 min
Cyber security architecture is about far more than technology, it’s about designing resilient systems that align people, process, and business strategy. In this episode, host Bek Cheb sits down with Bruce Large to unpack what security architecture actually means, why “defensible architecture” matters, and how frameworks like SABSA help organisations connect high-level risk strategy with real-world implementation. Bruce shares practical insights into balancing technical detail with broader organisational goals, the importance of service management, and why good architecture is often about asking the right questions rather than having all the answers. If you’re curious about how resilient systems are built, this episode offers an accessible look into the thinking behind modern security design.
22 min
Why do cyber security frameworks get such a bad reputation, and how can organisations turn them from a compliance headache into a genuine business advantage? In this episode, Bek Cheb sits down with cyber security and GRC expert Dan Goldberg to unpack the evolving world of ISO 27001, governance, risk, and compliance. With more than 25 years of experience spanning network transformations, cyber security, project management, and executive leadership, Dan shares how an unexpected career pivot led him to discover a passion for frameworks and continual improvement.
23 min
Vulnerability management is often treated as a simple patch-and-move-on exercise, but as Peter Gigengack explains, that mindset only scratches the surface. This episode explores the reality of managing risk in modern environments, where unknown vulnerabilities, human error, and expanding attack surfaces make security feel like steering through an iceberg field with limited visibility. Drawing on real-world experience, Peter unpacks why patching alone isn’t enough, how factors like misconfigurations and supply chain complexity create hidden risks, and why traditional tools like CVSS scores don’t always tell the full story. He also explores the growing impact of AI on software development, the challenges of prioritisation in an overwhelming volume of vulnerabilities, and the importance of adopting an attacker mindset.
24 min
Cyber risk is often talked about in colours, heatmaps, and assumptions, but what happens when you put a dollar value behind it? In this episode, we’re joined by Jason Ha to unpack the evolving world of cyber risk quantification and why it’s becoming a critical tool for modern organisations. From his early days in “infosec” to helping businesses translate technical risk into boardroom language, Jason shares practical insights on turning uncertainty into actionable data. We explore why many organisations struggle to quantify cyber risk, how to get started without overcomplicating the process, and why communication is the real game changer.
24 min
What do LEGO bricks have to do with cyber security? In this episode of Share Today, Save Tomorrow, we’re joined by Vannessa Van Beek, Global CISO at Fortescue, to explore an unexpected but powerful tool for improving collaboration, creativity, and insight in cyber teams. Drawing on the LEGO Serious Play methodology, Vannessa shares how hands-on, creative exercises can unlock new ways of thinking, surface hidden perspectives, and give quieter voices in technical teams the space to contribute. If you’ve ever wondered how to make meetings more meaningful, bring introverted experts into the conversation, or reimagine how cyber teams solve problems, this episode might just inspire you to think with your hands.
39 min
What happens when the world’s top cyber talent goes head-to-head on a global stage? This episode of Share Today, Save Tomorrow dives into the excitement behind the International Cybersecurity Challenge (ICC). Host Bek Cheb is joined by Ryan Ko and Kana Smith from the UQ Cyber Research Centre at The University of Queensland to unpack what makes this competition one of the most prestigious events for young adults in the cyber security space. From elite attack-and-defence Capture the Flag challenges to global talent pipelines, ICC is about shaping the future of cyber security. With teams representing every continent and real-world scenarios unfolding over two intense days, ICC 2026 marks a major milestone as Australia hosts for the first time at AUSCERT2026 Cyber Security Conference. If you’ve ever wondered what elite cyber competition looks like, how global collaboration fuels innovation, or why ICC competitors are often snapped up by industry leaders, this episode gives you a front-row seat. Want to see it play out on the big stage? Register for AUSCERT2026 now: https://conference.auscert.org.au/
33 min
Big news for the AUSCERT community! Ash Deuble has joined the team as our new Analyst Team Manager, and in this episode of Share Today, Save Tomorrow, he sits down with Bek Cheb to talk about the road that led him here. Long before stepping into the role, Ash was already part of the AUSCERT community through member organisations, collaborating with the team and contributing to the community that keeps Australia stronger against cyber threats. Now he’s on the inside, bringing that experience, perspective, and momentum with him. Ash shares what it means to move from community member to leader, his approach to supporting analysts, and where he sees opportunities to grow capability, connection, and impact across the network. Expect insights into teamwork, trust, and why showing up for each other is still one of the most powerful tools in cyber security.
20 min
In this episode of the AUSCERT podcast, host Bek Cheb and guest Chris Gatford, founder of HackLabs, explore the critical role of social engineering in modern cyber security. Their discussion unpacks how attackers exploit human behaviour, why technical controls alone aren’t enough, and strategies for building stronger resilience against these threats.
38 min
In this episode of the Share Today, Save Tomorrow podcast, AUSCERT’s David Stockdale sits down with Meg Tapia, Managing Director of Novexus, and Ross Patterson, Senior Intelligence Consultant at Recorded Future, to unpack the rising threat of disinformation in cyber security. Together, they explore how false narratives shape risk, impact organisations, and what leaders can do to stay resilient in an age of digital deception.
40 min
In this episode, host Bek Cheb is joined by David Stockdale, Director of AUSCERT, and Ivano Bongiovanni, General Manager, for a wide-ranging conversation that goes beyond titles and roles. Together, they reflect on the personal moments that shaped their year, the lessons learned through change and growth, and the milestones that defined AUSCERT in 2025. The discussion explores the development of AUSCERT’s long-term 2025–2030 strategy, the organisation’s evolving identity within the global CERT community, and the importance of collaboration, patience, and adaptability in a rapidly changing cyber security landscape. David and Ivano also share candid insights into leadership, change management, and what it takes to balance ambition with sustainability. Whether you’re part of the AUSCERT community or navigating change within your own organisation, this episode offers thoughtful reflections, practical leadership insights, and a clear sense of purpose for the year ahead.
27 min
In this episode of Share Today, Save Tomorrow, Ivano sits down with Professor Marek Kowalkiewicz, Chair in Digital Economy at QUT and author of The Economy of Algorithms. We explore his RACERS framework, the shift from viewing AI as a mere tool to treating it as a creative partner, and why experimentation is key to managing risks. From surprising real-world applications to global policy gaps, this conversation offers practical insights for leaders navigating the AI revolution.
25 min
In this episode, we’re joined by AUSCERT’s Principal Analyst, Mark Carey-Smith, and Business Manager, Bek Cheb. Together, they discuss the upcoming AUSCERT2026 Cyber Security Conference, celebrating its 25th anniversary, and explore what “Game On!” means for the cyber security community. Competition Alert! As a way of thanking you for your continued support, we’ve got a special giveaway just for our listeners: 1. Listen out for the secret codeword in this episode. 2. Enter it in the form below for your chance to win a free AUSCERT2026 registration! https://docs.google.com/forms/d/e/1FAIpQLSez00NbkEtItdq7eTQ9da69Zbq68u42e7Zo_3wzeiD-IUbyag/viewform?usp=dialog
26 min
In this episode, we are joined by two of WTW’s Cyber and Technology Risk team, Ben Di Marco & Leah Mooney, to expertly unpack the evolving landscape of AI governance, cyber risk, and insurance. They explore how voluntary guardrails are shaping future regulation, why cyber insurance is now essential (not optional), and the practical steps SMEs and large enterprises can take to boost resilience. The discussion highlights the importance of cross-functional collaboration, board-level engagement, and clear risk communication to navigate a complex threat environment. Whether you're in cyber security, risk, or leadership, this episode offers valuable insights to help you stay ahead of regulatory change and emerging digital risks.
28 min
In this episode of the Share Today, Save Tomorrow podcast, host Bek chats with Lucas, one of our senior software developers, for a behind-the-scenes look at MSINs — a vital security service for AUSCERT members. Lucas takes us through his development journey and explains how the dev team builds and maintains the systems that power AUSCERT’s incident response and threat intelligence capabilities. He also shares practical advice on how members can make the most of these services to strengthen their own cyber resilience.
24 min
In this episode of the Share Today, Save Tomorrow podcast, our General Manager Ivano Bongiovanni sits down with Jess Dodson, Cloud Solution Architect at Microsoft and long-time friend of AUSCERT. With her signature blend of technical insight and infectious enthusiasm, Jess shares her unconventional journey into cyber security, ranging from sysadmin roots to strategic security leadership. The conversation dives into the importance of mastering the basics, the evolving role of communication in cyber strategy, and the challenges facing SMBs and government sectors. Jess also offers her take on AI’s impact on data protection, the Essential Eight (with a sci-fi twist), and why reframing cyber security as business transformation is key to resilience. Listen now and join the conversation on how we can build a more secure, inclusive, and forward-thinking cyber industry.
19 min
In this episode of the AUSCERT podcast, host Bek Cheb sits down with Shane Lim, Senior Analyst at AUSCERT, for a deep dive into his journey from IT generalist to cyber security specialist. Shane shares how a cyber champions program sparked his passion for the field, and how he quickly rose through the ranks at AUSCERT thanks to his curiosity, leadership, and collaborative spirit. Get an insider’s look at one of AUSCERT’s most vital member services, Phishing Takedowns. Shane breaks down how the process works, why phishing remains a persistent threat, and the technical and human challenges involved in taking malicious sites offline. From impersonation tactics to CAPTCHA barriers, Shane offers practical insights into how AUSCERT protects member brands and data. Whether you're curious about career paths in cyber or want to understand the real-world impact of phishing protection, this episode is packed with relatable stories, expert knowledge, and even a few surprises. Tune in now to hear how passion, teamwork, and a love of cars intersect in the world of cyber security.
14 min
In this powerful episode of the AUSCERT podcast, host Bek Cheb speaks with Zane, founder of Security2Cure, a charity born from personal tragedy and driven by a mission to raise awareness around cancer and health planning. Zane shares how cyber security principles like plan, prevent, detect, and respond have inspired a framework for personal wellbeing, and how the cyber security community has rallied behind his cause. From digital estate planning to emotional support, this episode explores the human side of tech and the importance of preparing for life’s unexpected challenges.