2024
Start-Up and Tech (Bali)
Technology & Innovation
Why early-stage companies should treat cybersecurity as a strategic asset that builds investor confidence, customer trust and regulatory readiness.
Speaking / Log
Speaking &
Briefings.
Keynotes, panels and executive briefings on cybersecurity, emerging technology, risk and the hacker's perspective on how systems fail.
14 selected engagements
On stage at
DEF CONGITEXGISECBSidesAlmedalenExpo 2020
Speaking across Europe, North America, the Middle East and Asia-Pacific.
Briefs
What I speak about
01
The hacker's perspective
How attackers see systems differently — and what that reveals about technology, organisations and risk.
02
Cybersecurity & risk
What boards and leaders need to understand about cyber risk beyond controls, audits and compliance.
03
Emerging technology
AI, automation and the security consequences of technologies moving faster than the institutions governing them.
04
Critical infrastructure
OT/ICS, cyber-physical systems and what happens when digital compromise produces physical consequences.
Keynotes
Signature talks
01
Hackers Don't Read Your Policies
What attackers understand about organisations that compliance frameworks don't.
02
When Digital Becomes Physical
What fifteen years around industrial and cyber-physical security teaches us about the future of cyber risk.
03
Security by Obscurity Is Dead
What AI changes when expertise, reconnaissance and attack capability become cheap.
Stages
Featured engagements
DEF CON
Las Vegas, USA · 2017, 2018
ICS Killswitch — cyber-physical industrial security
GITEX
Dubai · 2019
Industry 4.0 security
GISEC
Dubai · 2019
Cyber-physical security
BSides London
UK · 2016, 2017, 2018
Web application security and original research
Almedalen
Sweden · 2016
Cybersecurity policy
Engagement history
Speaking archive
2023
Industrial Cyber Security Panel (USA)
OT Security & Critical Infrastructure
A panel on securing industrial control systems, and the gap between IT-style controls and OT-native risk.
2022
Private Equity Conference (USA)
Cybersecurity in M&A
The questions investors should ask before an acquisition, and how to structure remediation when material findings surface.
2020
Expo 2020 (Dubai)
Security Innovation
How organisations and nation-states are rethinking the security stack as connected systems multiply.
2019
Logistics Security Event (UK)
Supply Chain & Transport Security
Third-party risk and transport-system attack patterns in logistics networks, and the changes that reduce exposure.
2019
GITEX (Dubai)
Industry 4.0 Security
How IIoT, edge computing and converged IT/OT architectures expand the attack surface.
2019
GISEC (Dubai)
Cyber-Physical Security
Real attack chains where compromise of digital systems produced physical consequences, and the controls that break them.
2018
SteelCon (UK)
Industrial Security
Why the primitives that make ICS networks reliable also make them brittle under targeted pressure.
2018
Confidence (Poland)
Cybersecurity Research
How independent researchers find the vulnerabilities vendors miss, and where disclosure economics break down.
2018
F5 Networks (UK)
Hacker's Mindset
How adversaries identify attack paths that conventional architecture reviews and control inventories miss.
2018
Fortinet (UK)
Hacker's Mindset
The gap between control inventories and real attack paths, with exercises engineers can run on their own networks.
2017, 2018
DEF CON (USA)
ICS Killswitch — Cyber-Physical Industrial Security
Presented at DEF CON in Las Vegas in 2017 and 2018: cyber-physical attack chains against industrial control systems, and the disclosure path that followed.
2016, 2017, 2018
BSides London (UK)
Web Application Security & Research
Three years of talks on under-reported web application bug classes and research methodology.
2016
Almedalen (Sweden)
Cybersecurity Policy
Technical attack realities translated for policy-makers at Almedalen Week, and where European legislation stood against the threat.
Formats
Ways to work together
Keynotes
Large-audience ideas and perspective.
Technical talks
Practitioner and security audiences.
Executive briefings
Private sessions for boards and leadership teams.
Panels & media
Expert discussion and commentary.
Invitations
Bring Matthew to your event.
Keynotes, conference talks, panels and private executive briefings.
Speaking enquiryFor media commentary and interviews, visit Media