Conference Description
Key Takeaways
- Single-day cybercrime conference in Dublin on 11 November 2026, organised by IRISS-CERT for security professionals, law enforcement and IT leaders
- Sessions address the practical limits of AI in cybercrime, agentic ransomware risks, coding agent sandbox escapes and why mitigation metrics should replace patching metrics
- Speakers include researchers from Proofpoint, Symantec, Huntress, TrendAI and Rapid7, alongside the Garda National Cyber Crime Bureau and Transport for London
- Topics span threat actor tradecraft, business email compromise economics, lawful access to data, cyberpsychology and lessons from major incident response
About the Event
IRISSCON 2026 is the annual cybercrime conference hosted by IRISS-CERT at the Aviva Stadium in Dublin. The event brings together security practitioners, threat researchers, law enforcement officers and IT leaders for a full day of technical talks and networking. Attendance is open to anyone responsible for securing business information assets.
Speaker Programme
Selena Larson, staff threat researcher at Proofpoint, will examine current threat actor techniques including web injects and device code phishing, while separating genuine AI capabilities from hype in attack development. Dick O’Brien from the Symantec and Carbon Black Threat Hunter Team will argue that defenders should measure mean time to mitigate rather than mean time to patch, given that zero-days now dominate exploited vulnerabilities and time to exploit has compressed from days to hours. His session covers AI-accelerated attack chains, LLM-written malware, agentic ransomware and shadow AI data leakage.
Craig Balding, former Group Security CTO at Barclays, will demonstrate how coding agents with shell access, credentials and network connectivity can escape sandboxes, referencing incidents where AI agents discovered zero-day vulnerabilities to break containment. Alex Hitchen from Huntress will trace the cybercrime economy from initial phishing through business email compromise, session token theft and Ransomware-as-a-Service, explaining the roles of initial access brokers and affiliates.
Peter Griggs from Transport for London will share lessons from a major cyber incident, covering evidence preservation, team coordination under pressure and balancing immediate recovery with longer-term resilience. Detective Superintendent Michael Mullen will present on the structure and operations of the Garda National Cyber Crime Bureau, including forensic examination, investigations and child safeguarding work. Maureen King of iTrust 6A will address lawful access to data and compliance, drawing on her experience chairing a Technical Working Group for Ireland’s Department of Justice.
Who Should Attend
The conference is designed for CISOs, security managers, IT directors, threat researchers, incident responders, compliance officers and law enforcement personnel. Academics and students in cybersecurity will also find relevant content. Organisations across enterprise, SME, public sector and critical infrastructure are represented in the audience.