How to Steal Credentials and Bypass MFA
Think MFA is your get-out-of-breach-free card? This one shows how adversary-in-the-middle kits, device code phishing and ClickFix get around it, then what to switch off and what to watch for.
Talks I give
I re-cut each talk for the room and the time slot, and update it as new research lands.
Sh!t Hit the Fan: True Tales of Incident Response
For anyone who's woken to a 3am alert because someone has been rummaging through the network like a bin chicken on ice. Real breaches, how they started, and the forehead-slappingly obvious things that would have stopped them.
Breach to Burnout
What real incidents teach us about cyber readiness, including the human cost that never makes it into the incident report.
Securing the AI Era
AI has mostly changed the economics of old attacks. A practical look at what that means for your team, mapped to the framework you're already measured against. My keynote at Sophos Fusion Unfiltered Sydney on 11/11/2026.
Where I've spoken
These are just a few to call out from many, many speaking engagements. Since 2022 there have also been a few hundred webinars, partner workshops and training sessions across the globe, with a focus on Asia Pacific.
AISA CyberCon Melbourne
- 2026How to Steal Credentials and Bypass MFA 2.0 (Yes, It Got Worse)
- 2025How to Steal Credentials and Bypass MFA (For Educational Purposes, Of Course)
- 2025Sh!t Hit the Fan: True Tales of Incident Response You Won't Find in a Textbook
- 2024A is for Assume, B is for Breach
Sophos Fusion Unfiltered Brisbane
- 2026Presenter
AISA webinar Online
- 2026How to Steal Credentials and Bypass MFA, the hour-long version
Sophos APJ Partner 100 About 150 partners each time
- 2026How to Steal Credentials and Bypass MFA, Bali
- 2025Regional content advisor for the APJ event
- 2024Get More From Microsoft, a Sophos services session and a 90-minute integrations workshop
- 2022Threat theatre, a live attack and response demo, plus sessions on outsourcing 24x7 security and MDR integrations, Bali
LGIT Conference
- 2025Breach to Burnout: What Real Incidents Teach Us About Cyber Readiness
Fiji Tech Summit
- 2025Breach to Burnout, the 15-minute cut
GTIA ANZ
- 2025Real world cyber war stories
ARN Edge
- 2023Why 24/7 detection and response matters, told through incident response cases
CISO Sit Down
- 2023CIO stream
Executive roundtables Manila and Canberra
- 2023Supply chain attacks
ConnectWise IT Nation
- 2022Outsourcing 24x7 Security: The Benefits to You, the MSP
Sophos partner panel As RODIN's general manager
- 2022Panellist, on why internal IT teams can't carry security alone anymore
Hosted Network webinars Online, as RODIN's general manager
- 2021MSP pricing and packaging
- 2021MSP maturity: the pain points at each stage and what to focus on when
Sophos MSP webinar Online, as RODIN's general manager
- 2020Lessons from running an MSP: standardise everything, take security and compliance seriously, and sell consulting
Sophos case study and CRN Coverage, as RODIN's general manager
- 2018Sophos partner case study on RODIN's managed security
- 2018CRN interview on how RODIN delivers security