About us
SecTalks is one of the world’s largest non-profit Cyber Security communities, with chapters spanning multiple continents. We host free monthly events focused on technical security topics and practical security challenges. Our sessions are designed for a broad audience, from those just starting out through to experienced professionals.
#### What happens at SecTalks Gold Coast?
SecTalks Gold Coast is all about knowledge sharing, hands-on learning, and networking. We host an informal meetup where attendees can connect with others in the local community and hear presentations on information security topics.
We welcome discussion and learning across all areas of security, including:
Penetration Testing, Red Teaming, Social Engineering, Phishing, Exploit Development, Security Automation, DevSecOps, SecDevOps, Secure Development, Application Security, Security Architecture, Cloud Security, Security Operations, SIEM, Incident Response, Threat Hunting, Forensics, Network Security, Governance, Risk Management, Compliance, and more.
#### Who is the meetup for?
Anyone with an interest in information security is welcome, from beginners and students through to experienced practitioners.
SecTalks is a community-focused event, not a sales forum. It is not the place to attend with the intention of promoting products or services.
#### How does SecTalks Gold Coast operate?
SecTalks Gold Coast is run by volunteers, including Paula Sillars, Paul McCarty, Michael Skelton (@Codingo), and Ricki Burke (@CyberSecRicki), for the benefit of the local community. Our goal is to create a welcoming environment where people can share ideas, learn from one another, and build connections.
SecTalks Gold Coast operates under a strict Code of Conduct.
Upcoming events
2
SecTalks Gold Coast Nov 2026 - Brotlipocalypse: The Bug Hiding in Plain Sight
Cohort Innovation Space, 16 Nexus Way, Southport, QL, AUTitle: Brotlipocalypse: The Bug Hiding in Plain Sight - speaker Paul McCarty
CVE-2026-111497 is a great example of how a simple vulnerability can become a surprisingly difficult software supply chain problem.
In this talk, we'll walk through the vulnerable Brotli source code, break down the bug in plain English, and show why it's remarkably easy to understand once you know where to look.
Then comes the hard part: finding it in the wild.
Brotli is everywhere, but it isn't always installed as a library or tracked as a package dependency. Developers frequently vendor the source code directly into their projects, making traditional dependency scanners and SBOMs potentially blind to vulnerable copies.
We'll explore real-world examples, examine why conventional vulnerability detection falls short, and discuss practical techniques for hunting down vulnerable code across the open-source ecosystem.
The takeaway: Finding a vulnerability in source code is one thing. Finding every copy of that code is an entirely different challenge.
Drinks are provided by our sponsor, Solis, and pizza is provided by Cyber Audit Team. As usual, our venue is sponsored by COHORT.
GC SecTalks maintains a strict Code of Conduct.
42 attendeesSecTalks Gold Coast Feb 2027 - The Rise and Fall of TeamPCP
Cohort Innovation Space, 16 Nexus Way, Southport, QL, AUTitle: The Rise and Fall of TeamPCP: The most productive software supply chain threat actor ever - speaker Paul McCarty
Abstract:
TeamPCP is a financially motivated cybercrime group that emerged in late 2025 and became one of the most prolific actors targeting the open-source software supply chain. The group specializes in compromising developer accounts, GitHub repositories, CI/CD pipelines, and package-publishing infrastructure to inject credential-stealing malware into legitimate npm and PyPI packages. During 2026, TeamPCP dramatically scaled its operations through Mini Shai-Hulud, a self-propagating supply-chain worm that steals GitHub, package-registry, cloud, and developer credentials and then uses that access to compromise additional projects, creating cascading infections. Its campaigns have affected hundreds of packages and prominent developer and security tooling, while the group has also engaged in data theft, extortion, cryptocurrency theft, partnerships with other cybercriminal groups, and eventually released its own malware source code to encourage further supply-chain compromises.This talk will dive into what made TeamPCP such a powerful milestone in the history of software supply chain attacks. Paul will share details about the case that have never been published before, as well as his own case notes and tracking.
Drinks are provided by our sponsor, Solis, and pizza is provided by Cyber Audit Team. As usual, our venue is sponsored by COHORT.
GC SecTalks maintains a strict Code of Conduct.
4 attendees
Past events
46
