talks

home | talks | bugs | projects | contact

if you want me to come speak at something - flick me an email. my address is on the contact page.

The cookie is a lie: Handing Canarytoken sessions to infostealers upcoming at Kawaiicon 4, 30th of October 2026

Collab talk with Jacob Torrey from Thinkst Canary.

"Infostealer malware is on the rise–as MFA rollouts increase, stealing sessions (instead of usernames and passwords) is the new hotness. Once your information is stolen, what then? That’s what we set out to answer. Join Will and Jacob as they purposely infect themselves with malware and “deploy” their long-lasting session cookies into the malware operators’ databases. We created a new type of Canarytoken (session cookies) and gave out free samples to all the infostealer malware folks we could find. Then we watched to see what happened… (come to this talk if you want to find out–we’re not going to spoil it in the talk synopsis)"

AI Hacking - Think Like an Attacker to Secure AI

Presentation/training focused on pentesting AI/LLM solutions like chatbots. Given at:

Cyber Security Awareness

A presentation at the BNZ For Purpose Sector Governance Forum III, covering common cybersecurity risks for an audience of Not-For-Profit CEOs, Trustees, and Directors. (Link to relevant LinkedIn post) April 22nd 2026

Infostealers (external link)

A presentation on Infostealers, how they work, what they do, and how we can protect ourselves against them. Given at:

Breaking into Cybersecurity

A talk at the University of Otago describing how to get in to the pentesting industry as a student. (Link to the event poster from OCSS) October 7th 2024