Skip to main content
Modern 42 Logo
M42 Labs · Presentations

Research, on stage.

Our engineers present what they find breaking and hardening Microsoft Entra ID, Conditional Access and privileged access at Australia's leading security conferences. Every deck is available on request.

Browse the talks Request a speaker
21Talks
9Speakers
6Conferences
4Years on stage
Timeline

Ideas shared, defenders stronger.

Security improves when what we learn is shared. Every talk we have given to Australia's cyber community, newest first, with the slides free on request.

CyberCon Melbourne 2026

Dates
14–15 Oct 2026
Venue
Melbourne Convention and Exhibition Centre
Talks
3 talks
A full room of attendees watching Sophie Wade present on privileged access management at CyberCon Melbourne 2026
A full room · CyberCon Melbourne 2026

Talk, Australian Cyber Conference Melbourne 2026

Privileged Access Management: When audit confidence and operational reality diverge

Passing a privileged access audit rarely means PAM works in practice. Maps where privilege really lives, from service accounts, secrets, API keys and certificates to agentic processes, then the coverage failures, process workarounds and observability blind spots an attacker finds first, with discovery questions to take back to the office.

  • Privileged access
  • Non-human identities
  • Audit
  • Observability
  • Sophie Wade, CEO & FounderSophie WadeCEO & Founder
Session
A seated crowd watching Rawson Wade present on rogue device identities and zero trust at the Think Tank 2 stage, CyberCon Melbourne 2026
Think Tank 2 · CyberCon Melbourne 2026

Think Tank, Australian Cyber Conference Melbourne 2026

Device and conquer: How rogue device identities undermine your zero trust architecture

A live demonstration of registering a rogue device to obtain a Primary Refresh Token, then using it to get past MFA and Conditional Access, built with our open-source red-team toolkit SuiteAuth. Covers fake versus compromised devices, a vulnerability we found in Microsoft's mobile App Protection Policy enforcement, and the detection queries and hardening checklist to close the gap.

  • Primary Refresh Token
  • Conditional Access
  • Device identity
  • Zero trust
About SuiteAuthSession

Knowledge Hub, Australian Cyber Conference Melbourne 2026

What if isn't enough: Real-world verification of your Microsoft Entra ID conditional access

Almost every signal Conditional Access trusts is self-reported at sign-in. The What If tool and report-only mode show which policies apply, not whether they hold when an attacker controls those signals. A live MFA bypass that What If reports as protected, the attack path rebuilt with a single testing harness, and the Conditional Access vulnerabilities Modern 42 Labs disclosed to Microsoft this year.

  • Conditional Access
  • MFA bypass
  • Entra ID
  • Security testing
Our disclosed CVEsSession

BSides Canberra 2026

Dates
26 Sept 2026
Venue
National Convention Centre Canberra
Talks
1 talk
A packed auditorium under blue-lit roof trusses at BSides Canberra 2026
Main stage audience · BSides Canberra 2026

Talk, BSides Canberra Canberra 2026

Exploiting the Microsoft 365 Substrate: How their OAuth Clients Became an MFA Bypass Across Enterprise Tenants

What happens to a token after Entra ID issues it. An authorisation mismatch between Entra ID single sign-on and the Microsoft 365 Substrate let attackers compromise enterprise accounts where MFA should have been enforced. The Microsoft-patched, Important-rated vulnerability from discovery to data exfiltration, the roles Windows Search, Edge and Teams played, and lessons for developers on which token claims really guarantee what they appear to.

  • Microsoft 365
  • MFA bypass
  • OAuth
  • Entra ID
Our disclosed CVEsSession

CyberCon Melbourne 2025

Dates
15–17 Oct 2025
Venue
Melbourne Convention and Exhibition Centre
Talks
3 talks

Talk, Australian Cyber Conference Melbourne 2025

Unpacking the use cases and cyber pressure points of Closed Community CIAM

Customer identity for closed communities, where only known, eligible people may sign up: the use cases it serves and the cyber pressure points it creates.

  • CIAM
  • Entra External ID
  • Customer identity
  • Sophie Wade, CEO & FounderSophie WadeCEO & Founder
Session
A large standing crowd gathered around the stage as Rawson Wade presents at CyberCon Melbourne 2025
Standing room only · CyberCon Melbourne 2025

Think Tank, Australian Cyber Conference Melbourne 2025

False sense of security: How attackers swim past your MFA

MFA is switched on, so you are safe? An identity and access management session on how attackers get past MFA in Microsoft Entra ID, drawing on the Modern 42 Labs research into MFA and Conditional Access bypasses.

  • MFA bypass
  • Entra ID
  • Conditional Access
Our disclosed CVEsSession
Nick Tillack presenting on OAuth in the age of agentic AI at the Think Tank 2 stage, CyberCon Melbourne 2025
Think Tank 2 · CyberCon Melbourne 2025

Think Tank, Australian Cyber Conference Melbourne 2025

Modern OAuth: token theft in 2025 and how we can prevent against it

OAuth tokens now carry the trust that MFA establishes, which makes stealing them the shortest path around it. How token theft works in 2025 and the controls that prevent it.

  • OAuth
  • Token theft
  • Entra ID
Session

CyberCon Melbourne 2024

Dates
26–28 Nov 2024
Venue
Melbourne Convention and Exhibition Centre
Talks
6 talks

Talk, Australian Cyber Conference Melbourne 2024

Success with Privileged Access Management: It's more than the tools

PAM is more than a product. Many of the ACSC Essential Eight privileged access controls can be met with people and process alone. Our recipe for PAM success, built on PAM service design.

  • Privileged access
  • Essential Eight
  • Service design
  • Ashley Coward, IAM & PAM Practice LeadAshley CowardIAM & PAM Practice Lead
Session

Ask an Expert, Australian Cyber Conference Melbourne 2024

How do I uplift my IAM reporting

What your organisation should be reporting on in identity and access management, and how to detect unsanctioned accounts, post-termination activity and suspicious reactivations.

  • IAM reporting
  • Identity governance
  • Detection
  • Sophie Wade, CEO & FounderSophie WadeCEO & Founder
Session

Ask an Expert, Australian Cyber Conference Melbourne 2024

How to build custom applications to extend Entra ID sign-up flows and migrate your customers' digital identities

Lessons from leading development on a state government CIAM platform on Microsoft's new customer identity service: pre-sign-up validation, setting UPNs and extension attributes after sign-up, and migrating users from legacy Azure AD B2C.

  • Entra External ID
  • Azure AD B2C migration
  • CIAM
  • Alexander Cavalli, Senior Software DeveloperAlexander CavalliSenior Software Developer
Session

Knowledge Hub, Australian Cyber Conference Melbourne 2024

Do you have an ROPC issue? Understanding the risks and how to monitor and protect your tenant

A compressed 20-minute version of our Canberra session, with a live demo of an active Resource Owner Password Credential (ROPC) exploit and the monitoring and blocking that protects an Entra ID tenant.

  • ROPC
  • Entra ID
  • Legacy authentication
  • Dave Stott, Cloud Security ArchitectDave StottCloud Security Architect
  • Michael Bruce, Cloud Security EngineerMichael BruceCloud Security Engineer
Session

Ask an Expert, Australian Cyber Conference Melbourne 2024

Securing your application development in Microsoft Azure and Entra ID

Applications are easier to build than ever, but there is no magic wand for security. Secure-by-design engineering for Azure and Entra ID apps, from developer laptops, networks and privilege to the code and libraries you depend on, including the risks of AI-assisted coding.

  • Secure development
  • Azure
  • Entra ID
  • AI-assisted coding
Session

Panel, Australian Cyber Conference Melbourne 2024

Elevating identity management: strategic planning, building, and monitoring for unmatched security

An industry panel on preparing for a strategic identity uplift: roadmaps, workforce and customer identity, lifecycle and consent, privileged and just-in-time access, and the KPIs that prove progress. Sophie Wade with Lee-Ann Dias, Taylah Rowe and Daniel Goffredo.

  • IAM strategy
  • Identity governance
  • Privileged access
  • Sophie Wade, CEO & FounderSophie WadeCEO & Founder
Session

CyberCon Canberra 2024

Dates
26–27 Mar 2024
Venue
National Convention Centre Canberra
Talks
4 talks

Presented as Modern Methodologies, our name until 2024.

Talk, Australian Cyber Conference Canberra 2024

Is your Entra ID tenant protected? ROPC and how to protect against it

Resource Owner Password Credential (ROPC) and why it matters: tips and tricks for blocking ROPC, plus Entra ID and Azure security best practices.

  • ROPC
  • Entra ID
  • Azure security
  • Dave Stott, Cloud Security ArchitectDave StottCloud Security Architect
  • Michael Bruce, Cloud Security EngineerMichael BruceCloud Security Engineer
Session

Think Tank, Australian Cyber Conference Canberra 2024

Success with privileged access management: It's more than the tools

Why privileged access management succeeds or fails on people and process, not only on the tooling you buy.

  • Privileged access
  • Service design
  • Ashley Coward, IAM & PAM Practice LeadAshley CowardIAM & PAM Practice Lead
Session

Talk, Australian Cyber Conference Canberra 2024

The ABC of CIAM: Customer Identity and Access Management

A grounding in customer identity and access management (CIAM): what it is and how it differs from workforce identity.

  • CIAM
  • Customer identity
  • Jodie BowmanIdentity Analyst
  • Sophie Wade, CEO & FounderSophie WadeCEO & Founder
Session

Talk, Australian Cyber Conference Canberra 2024

Solving the problem of managing those workforce identities who are NOT in HR

Contractors, partners and other workforce identities that never appear in the HR system, and how to bring them under identity lifecycle management.

  • Identity lifecycle
  • Identity governance
  • Contractors
  • Sophie Wade, CEO & FounderSophie WadeCEO & Founder
Session

CyberCon Melbourne 2023

Dates
17–19 Oct 2023
Venue
Melbourne Convention and Exhibition Centre
Talks
4 talks

Presented as Modern Methodologies, our name until 2024.

Talk, Australian Cyber Conference Melbourne 2023

IAM demystified: Decoding identity and access management for all

Identity and access management explained for everyone, not just identity specialists. Part of the conference's Identity Management stream.

  • IAM fundamentals
  • Sophie Wade, CEO & FounderSophie WadeCEO & Founder
Program

Ask an Expert, Australian Cyber Conference Melbourne 2023

How can you start driving identity and access management from your Azure Cloud

Where to start when making your Azure cloud, and Microsoft Entra ID, the driver of identity and access management across the organisation.

  • Entra ID
  • Azure
  • IAM strategy
Program

Ask an Expert, Australian Cyber Conference Melbourne 2023

MFA: the now and multi-modal future

The state of multi-factor authentication today and where multi-modal authentication is heading.

  • MFA
  • Authentication
  • Dave Stott, Cloud Security ArchitectDave StottCloud Security Architect
Program

Ask an Expert, Australian Cyber Conference Melbourne 2023

Inside the Firewall: Helping young women to navigate and stay in the security industry

A conversation on helping young women find their way into the security industry, and stay there.

  • Careers
  • Diversity in security
  • Ashley Coward, IAM & PAM Practice LeadAshley CowardIAM & PAM Practice Lead
Program
FAQ

Questions about our talks

Getting slides, booking a speaker and how we handle the vulnerabilities we present.

Select "Request slides" on the talk, leave your name and work email, and one of our engineers will email you a link to the PDF of the deck as presented, usually within one business day.
Yes. There is no charge and no mailing list sign-up. We ask for your email so a real person can send the deck and answer any follow-up questions about the research.
Yes. Our team presents on Microsoft Entra ID, Conditional Access, MFA and privileged access security research. Get in touch through our contact page with the event, audience and date.
Yes. Any vulnerability we present has been reported to the vendor first, through the Microsoft Security Response Center or the vendor's own programme, before it appears on stage. Disclosed issues are listed on our Security Vectors page.
Request a speaker

Bring a talk to your team.

The engineer behind the research presents it at your conference, meetup or internal security day, in person or online, mapped to the environment your audience runs.

  1. Pick a talk

    Choose a session from the timeline, or tell us the problem your team is working through.

  2. Tell us about your team

    Who will be in the room, what they already run, and what they want to walk away with.

  3. We bring the session to you

    The engineer behind the research presents it, mapped to your environment, with time for questions.

Speaking enquiries

Conferences and internal briefings

  • Industry conferences and security community events
  • Internal briefings for technical and leadership teams
  • Sessions tailored to your organisation and audience

Send the event, expected audience and preferred date, and we will recommend a session and presenter.

Make an enquiry Email us

We use cookies

We use cookies and similar technologies to help personalise content, measure the performance of our site, and provide a better experience. By clicking Accept, you consent to the use of all cookies.
Learn more.