Matthew Flanagan

45 Followers
211 Following
135 Posts
Director and Principal Cyber Security Consultant @cybliminal
GitHubhttps://github.com/mattimustang

I had a great time presenting to the @bsidesmelbourne crowd on the weekend. Thanks to the crew and volunteers for running such a welcoming, vibrant conference, with a great selection of talks!

If you missed my talk or just didn't get a chance to connect, I'll be at AUSCERT2026 this week as an attendee. Come find me.

Big ❤️ to Edwina Richards for the photos!
#BSidesMelb2026 #WontSomebodyPleaseEatTheFruit

Critical Vulnerability in PAN-OS (CERT-EU Security Advisory 2026-006)

On 6 May 2026, Palo Alto published a security advisory addressing a critical vulnerability affecting PAN-OS. This vulnerability allows an unauthenticated attacker to execute arbitrary code with root privileges.
Palo Alto observed limited exploitation of this vulnerability. It is strongly recommended updating affected appliances as soon as patches will be available, and to apply workarounds and mitigation in the meantime.

https://www.cert.europa.eu/publications/security-advisories/2026-006/

Critical Vulnerability in PAN-OS

Critical Vulnerability in PAN-OS

Palo Alto Networks warned customers today that a critical-severity unpatched vulnerability in the PAN-OS User-ID Authentication Portal is being exploited in attacks.

https://www.bleepingcomputer.com/news/security/palo-alto-networks-warns-of-actively-exploited-firewall-zero-day/

Palo Alto Networks warns of firewall RCE zero-day exploited in attacks

Palo Alto Networks warned customers today that a critical-severity unpatched vulnerability in the PAN-OS User-ID Authentication Portal is being exploited in attacks.

BleepingComputer

BSides Melbourne 2026 Schedule is now live - https://bsides-melbourne-2026.sessionize.com/schedule/day/20260516

We kick started yesterday introducing our 2 exciting keynotes - Paul McCarty and Lesley Carhart 👏 🥳

Next, we will do our speaker spotlights and villages.

🚨 Only 3 WEEKS TO GO!!! 🚨

#BSidesMelb2026

BSides Melbourne 2026

Schedule

I'm excited to announce I'll be taking the stage at @bsidesmelbourne 16-17 May 2026 at SEEK HQ in Cremorne.

I'll be presenting Panning for Gold: A Hacker's Guide to Next Generation Firewalls, covering how attackers can exploit the features and weaknesses of firewalls to increase the impact of a compromise.

If you're working in network security, red team, or just want to know what your NGFW is really exposing, come find out.

Tickets are on sale now at https://www.bsidesmelbourne.com/.

See you in Melbourne!

#BSidesMelbourne #PanningForGold #NGFW #OffensiveSecurity #InfoSec

BSides Melbourne

BSides Melbourne

BSIDES MELBOURNE

10,000 Chicago Concert Recordings Are Being Uploaded to the Internet Archive: Nirvana, Phish, Sonic Youth, They Might Be Giants & More

https://www.openculture.com/2026/04/10000-chicago-concert-recordings-are-being-uploaded-to-the-internet-archive-nirvana-phish-sonic-youth-they-might-be-giants-more.html

10,000 Chicago Concert Recordings Are Being Uploaded to the Internet Archive: Nirvana, Phish, Sonic Youth, They Might Be Giants & More

Perhaps you've had the experience of moving to a new city and immediately being told that you've missed its golden age of live music. To an extent, this has happened in more or less every period of the past fifty or sixty years.

Open Culture

🚨 REMINDER 🚨
@bsidesmelbourne Conference Tickets are going on sale TOMORROW.
When: Friday 27th March, 2026 @ 12pm AEDT.

This year we have 2 different offerings:
- A 2 day (Sat&Sun) conference ticket or
- Single day tickets for Saturday or Sunday

Not everyone can attend both days, and we don't want anyone to miss out.
https://lnkd.in/gEWqU6ks

NOTE: This is NOT a TRAINING a ticket. These will go on sale in April.

#BSidesMelb2026 #SecurityBSides

🚨 ALERT 🚨 - ALL you amazing people who VOLUNTEERED for @bsidesmelbourne

All selected volunteers have now been notified. Over 100 people wrote in, an amazing result, and totally consistent with our BSides Melbourne community vibe. But we have uniquely stuffed up. In our excitement to release this year’s form, we managed to delete the all-important “email field” to communicate with each of you personally. We apologise for that.

If you haven’t had a call or LinkedIn (or carrier pigeon!) message from us, then we regret to say that you haven’t selected as a volunteer. It also means that your best chance to attend BSides Melbourne 2026 is to buy a ticket when they go on sale this Friday 27 March at 12 noon AEDT.

We apologise again for this mistake, and hope to see you at our event.

#BSidesMelb2026 #volunteers

Hey everyone, we've sent out our "What happens in the next few days" email. But if you haven't seen it, double check your ticket, we're happy to update email addresses as we've had a few typos! DM us if you didn't get the email with Ticket Number and email address.

Droppy & The Sleuth

Call for Locks!

Our lock-picking crew are having some shipping dramas and may not have the usual gear in Brisbane in time for the workshops on Saturday!

If anyone is a member of a lock lock-sport club that may be able to come along with some gear and help out the crew (who are arriving with prizes and enthusiasm!) please reach out to us!

Droppy & The Sleuth