SecTalks Gold Coast

4.8•179 ratings

About us

SecTalks is one of the world’s largest non-profit Cyber Security communities, with chapters spanning multiple continents. We host free monthly events focused on technical security topics and practical security challenges. Our sessions are designed for a broad audience, from those just starting out through to experienced professionals.

#### What happens at SecTalks Gold Coast?

SecTalks Gold Coast is all about knowledge sharing, hands-on learning, and networking. We host an informal meetup where attendees can connect with others in the local community and hear presentations on information security topics.
We welcome discussion and learning across all areas of security, including:
Penetration Testing, Red Teaming, Social Engineering, Phishing, Exploit Development, Security Automation, DevSecOps, SecDevOps, Secure Development, Application Security, Security Architecture, Cloud Security, Security Operations, SIEM, Incident Response, Threat Hunting, Forensics, Network Security, Governance, Risk Management, Compliance, and more.

#### Who is the meetup for?

Anyone with an interest in information security is welcome, from beginners and students through to experienced practitioners.
SecTalks is a community-focused event, not a sales forum. It is not the place to attend with the intention of promoting products or services.

#### How does SecTalks Gold Coast operate?

SecTalks Gold Coast is run by volunteers, including Paula Sillars, Paul McCarty, Michael Skelton (@Codingo), and Ricki Burke (@CyberSecRicki), for the benefit of the local community. Our goal is to create a welcoming environment where people can share ideas, learn from one another, and build connections.
SecTalks Gold Coast operates under a strict Code of Conduct.

Upcoming events

See all

SecTalks Gold Coast 3x9 - Nov 2026 - The Rise and Fall of TeamPCP
Tue, Nov 3 · 6:00 PM AEST
Cohort Innovation Space, 16 Nexus Way, Southport, QL, AU
Title: The Rise and Fall of TeamPCP: The most productive software supply chain threat actor ever - speaker Paul McCarty

Abstract:
TeamPCP is a financially motivated cybercrime group that emerged in late 2025 and became one of the most prolific actors targeting the open-source software supply chain. The group specializes in compromising developer accounts, GitHub repositories, CI/CD pipelines, and package-publishing infrastructure to inject credential-stealing malware into legitimate npm and PyPI packages. During 2026, TeamPCP dramatically scaled its operations through Mini Shai-Hulud, a self-propagating supply-chain worm that steals GitHub, package-registry, cloud, and developer credentials and then uses that access to compromise additional projects, creating cascading infections. Its campaigns have affected hundreds of packages and prominent developer and security tooling, while the group has also engaged in data theft, extortion, cryptocurrency theft, partnerships with other cybercriminal groups, and eventually released its own malware source code to encourage further supply-chain compromises.

This talk will dive into what made TeamPCP such a powerful milestone in the history of software supply chain attacks. Paul will share details about the case that have never been published before, as well as his own case notes and tracking.

Drinks are provided by our sponsor, Solis , and pizza is provided by Cyber Audit Team. As usual, our venue is sponsored by COHORT.

GC SecTalks maintains a strict Code of Conduct.
29 attendees