14.10.26
DOUBLE TREE BY HILTON QAWRA MALTA
ADDRESS BY THE CEO
As Malta advances in its digital transformation journey, cybersecurity is about far more than protecting systems and networks. It is about protecting trust. Every day, citizens, businesses and public institutions place their trust in the digital services that support how we live, work and interact. That trust is difficult to build, easy to lose and essential to the success of a modern digital society. Technological innovation including artificial intelligence, is creating significant opportunities, but it is also introducing new risks and responsibilities. The question is no longer simply what technology can do, but whether we have the safeguards, oversight and resilience needed to use it responsibly. Cyber resilience is now inseparable from national resilience. The continuity of essential services, economic stability and public confidence increasingly depend on secure and resilient digital infrastructure. Building that resilience requires more than technology. It demands leadership, preparedness, collaboration and a willingness to learn from one another. At MITA, as Government's digital steward, Malta’s National CSIRT and NCC, we remain committed to strengthening these foundations and supporting a secure, trusted and resilient digital future for Malta. CyberRoot 2026 is an important part of that shared effort, bringing us together to strengthen collaboration, exchange knowledge and turn our collective commitment into action.
NCC
CYBERSECURITY NATIONAL COORDINATION CENTRE
MALTA
2
ADDRESS BY THE CISO
As we gather for the eighth edition of CYBER ROOT, it is evident that cybersecurity has become far more than a technical discipline. It now underpins the trust we place in our digital services, our institutions, our economy, and increasingly, our way of life. The pace of change continues to accelerate. Artificial Intelligence is reshaping the way we work, innovate, and deliver services, creating opportunities that only a few years ago seemed unimaginable. Yet, these same technologies are also transforming the threat landscape. Cybercriminals are becoming more adaptive, influence operations more convincing, and digital attacks more scalable and accessible. The barriers to entry for malicious actors continue to fall, while the consequences of compromise continue to grow. At the same time, organisations are navigating an increasingly complex environment defined by evolving cyber risks, supply-chain dependencies, regulatory obligations, workforce shortages, and ever-greater expectations for resilience. Cybersecurity can no longer be viewed as the responsibility of security professionals alone. It requires leadership, collaboration, and a shared commitment across government, industry, academia, and society. This year's CYBER ROOT reflects that reality.
NCC
CYBERSECURITY NATIONAL COORDINATION CENTRE
MALTA
4
The topics explored throughout this edition and during the conference programme examine not only the technologies shaping our future, but also the people, partnerships, and decisions that will determine whether that future is secure and resilient. From artificial intelligence and cybercrime to influence operations, threat intelligence, cyber skills, and organisational resilience, the discussions ahead will challenge us to think beyond traditional boundaries and consider cybersecurity as an enabler of trust and sustainable digital transformation. Encouragingly, we are also witnessing growing maturity across the cybersecurity ecosystem. Stronger collaboration between public and private sectors, increased investment in capability development, deeper international cooperation, and a greater focus on resilience are helping to strengthen our collective preparedness. While challenges remain, our ability to address them has never been greater. The defining cybersecurity challenge of our time is not merely protecting systems. It is preserving trust in a world where technology evolves faster than ever before. Whether through the responsible adoption of Artificial Intelligence, the strengthening of national cyber resilience, or the development of future cyber talent, our shared mission remains the same: to ensure that the digital future we are building is secure, resilient, and worthy of the confidence placed in it. I therefore encourage every attendee to make the most of CYBER ROOT 2026. Challenge conventional thinking. Ask difficult questions. Share your experiences openly. Build new partnerships. Most importantly, leave with at least one idea, one connection, or one action that you can take back to your organisation and turn into meaningful change. The collective strength of our cyber ecosystem is not determined by any single technology or institution, but by the willingness of its people to collaborate, learn from one another, and act.
NCC
CYBERSECURITY NATIONAL COORDINATION CENTRE
MALTA
5
I would like to thank all speakers, sponsors, partners, organisers, and participants for contributing to this year's event. Your expertise, commitment, and engagement help strengthen not only your respective organisations, but also Malta's wider cyber resilience. I hope this edition of CYBER ROOT proves insightful, thought-provoking, and above all, a catalyst for action.
NCC
CYBERSECURITY NATIONAL COORDINATION CENTRE
MALTA
6
7:45AM REGISTRATION 8:45AM WELCOME SPEECHES EMANUEL DARMANIN - CHIEF EXECUTIVE OFFICER, MITA
AGENDA
AGENDA
DEMOSTHENES IKONOMOU - HEAD OF OPERATIONAL SUPPORT SERVICES UNIT, ENISA 9:00AM AI: YOUR SMARTERST EMPLOYEE MIGHT BE YOUR BIGGEST RISK
GRAHAM CLULEY – CYBERSECURITY EXPERT AND KEYNOTE SPEAKER
ABSTRACT: Award-winning cybersecurity keynote speaker and host of the "Smashing Security" podcast Graham Cluley explores how artificial intelligence is reshaping the cybersecurity landscape - from the evolution of phishing scams and insider threats to the rise of AI-assisted cybercrime. This eye-opening keynote explores AI-driven fraud, machine-generated malware, and the emerging risk of "agentic misalignment," where autonomous systems act against your organisation's interests. Sponsored by Computime and CyberSift
9:40AM MORE THAN A FOOTHOLD: HOW ACCESS BROKERS BECAME CENTRAL TO CYBER CRIME REBECCA TAYLOR – THREAT INTELLIGENCE KNOWLEDGE MANAGER AND RESEARCHER, SOPHOS ABSTRACT: Access brokers have long been viewed as peripheral actors in the cybercrime economy - independent sellers offering compromised access via underground marketplaces. This talk argues that this view is now outdated. Today’s access brokers have evolved into central power brokers within underground communities, strategically positioning themselves at the intersection of access, trust, and influence. This talk examines the role of a modern-day access broker, and how they have become central to cybercrime.
7
AGENDA
10:20AM COMMUNITY, TECHNOLOGY AND HUMAN CONNECTION: STAYING PRESENT IN A DIGITAL WORLD
ALEXANDRA FORSYTH – FOUNDER, PODCAST HOST AND PUBLIC SPEAKER
ABSTRACT: This session will focus on strategies and recommendations, thinking about technology adoption, the need for consistent flow and adaptability within team environments and creating space for “safe-to-fail” mentality, leadership and growth.
Drawing on her work as a former Threat Intelligence Leader at Accenture, TEDx speaker and founder of the Take A Chance On You platform, Alexandra Forsyth brings a rare perspective to the intersection of technology and human performance. Alexandra will provide the H.U.M.A.N. ROI framework as part of interaction with the audience.
This keynote explores what it really means to lead, connect and remain present when the pace of digital transformation never stops accelerating. Through the lens of community building, psychological safety and adaptive leadership, Alexandra challenges audiences to rethink how organisations adopt technology not as a replacement for human judgement, but as an amplifier of it. Sponsored by PwC and MeDirect
11:00AM
COFFEE BRE AK 11:30AM FROM CURIOSITY TO CYBER CRIME: THE RISING THREAT OF TEENAGE HACKING GROUPS JOE TIDY – BBC’S FIRST CYBER CORRESPONDENT
ABSTRACT: What once was seen as harmless youthful curiosity is now turning into a serious cyber threat. Driven by money, fame, or recruitment into criminal networks, today’s teenage hackers are quickly progressing from innocent hacking to dangerous cyber crime. In this keynote, Joe explores the causes behind this shift, tracing the typical path from gaming cheats and social media scams to more sophisticated cyber attacks. Join Joe as he reveals how teenage curiosity is rapidly evolving into a new wave of hacking gangs, and why this matters to all of us. Sponsored by Diligex & Thomas Murray
8
AGENDA
12:10PM PANEL: THE LINES BETWEEN YOURS AND OURS - WHEN AN INCIDENT STOPS BEING YOUR PROBLEM ALONE MODERATOR: ANDREW SCHEMBRI – PARTNER AT PWC PANELISTS:
EVANGELIA DASKALAKI – PROJECT/PROGRAMME OFFICER IN THE OPERATIONAL SUPPORT SERVICES UNIT AT ENISA
LUIGI REBUFFI – FOUNDER, VP AND SECRETARY GENERAL OF THE WOMEN4CYBER (W4C) FOUNDATION JONATHAN CASSAR – CHIEF INFORMATION SECURITY OFFICER, CYBER SECURITY DEPARTMENT AT MITA NATHANIEL FALZON – LEGAL ADVISOR AT MITA
ABSTRACT: Cyber resilience is still largely measured one organisation at a time, yet the incidents that matter most rarely respect organisational boundaries. This panel examines what national response actually requires: the point at which an entity-led incident becomes a coordinated national one, who holds the authority to decide, what information must flow and how quickly, and when European assistance becomes the right call rather than an admission of failure.
MASTERCLASS: ATTACKING, DEFENDING AND ATTRIBUTING THE SEMANTIC LAYER AI, INFLUENCE OPERATIONS, AND MODERN TRADECRAFT ROELOF TEMMINGH – MANAGING DIRECTOR AT VORTIMO (PTY) LTD
ABSTRACT: This talk explores how modern influence operations increasingly target both AI systems and human perception through the manipulation of information and narratives. It provides a practical, technical look at how AI-driven influence campaigns can be created, how attackers can manipulate machine-assisted decision-making, and how such attacks can be detected and mitigated. The session also covers emerging defensive approaches, including multi-model analysis, semantic filtering and reusable signatures for recurring narrative attacks. Finally, it examines how OSINT and investigative techniques can be used to identify patterns, trace narrative evolution and support the attribution of real-world influence campaigns. Sponsored by EY, MDIA and Turing Cyber
9
LUNCH BRE AK 2:00PM CULTURE, CONFIDENCE AND SOCIAL ENGINEERING JENNY RADCLIFFE – PEOPLE HACKER AND SOCIAL ENGINEER
AGENDA
1:00PM
ABSTRACT: This session covers the human side of security breaches known as social engineering. Brought to you by Jenny Radcliffe aka “The People Hacker” the talk exposes the psychological tricks and tactics used by hackers and scammers to engage, extort and steal from their intended victims. From phishing emails and Social Media scams to the latest AI enabled deepfakes, corporate attacks and cyber warfare, Jenny explains how and why humans are at the heart of security and what we can all do to help protect ourselves from malicious social engineering. Sponsored by Comply.Land
2:40PM DECEPTION BY DESIGN - THE HUMAN MECHANICS OF MODERN FRAUD
CECILIE FJELLHØY – CO-FOUNDER OF LOVESAID, FRAUD PREVENTION AND FINANCIAL SAFETY SPEAKER
ABSTRACT: Cecilie Fjellhøy – known from Netflix’s The Tinder Swindler and host of Love Con Revenge- draws on her own story and the cases she sees advising organisations on scam defence to show how manipulation actually works. Not the technology. The human mechanics: how trust is built, weaponised, and broken, and why these crimes succeed against anyone, regardless of intelligence or awareness. Expect real stories, the psychology behind how these scams are engineered to work, and concrete takeaways for you and your organisation in a world where social engineering – now supercharged by AI – is the threat no firewall can stop. Sponsored by Commvault, ESET and ICT Solutions
3:20PM
CYBER AWARDS CLOSING NOTE 4:00PM
NETWORKING COFFEE 10
EMANUEL DARMANIN CEO, MITA
SPEAKERS
SPEAKERS
Emanuel Darmanin joined MITA in 1994 and since then he has occupied various senior management positions including that of Chief Information Officer. Over the years he had responsibilities for ICT Governance, Service Management, Information Security and Risk Management, Contracting and Supplier Management, and Project Management. Previous to joining MITA he worked in the public sector and the private sector, enjoying work
experiences both locally and abroad. He graduated as an Electrical Engineer from the University of Malta in 1989. In 2000, he gained an MBA from Henley Management College, UK and in 2006 an MA in Creativity and Innovation from the University of Malta.
DEMOSTHENES IKONOMOU HEAD OF OPERATIONAL SUPPORT SERVICES UNIT, ENISA
Demosthenes Ikonomou joined the European Network and Information Security Agency (ENISA) in 2008 and currently holds the position Head of Operational Support Services Unit. He received his Masters of Science in Electronics and Computer Sciences and his Ph.D. in applied sciences from the University of Southampton, United Kingdom, in 1992 and the Université catholique de Louvain-la-Neuve (UCL), Belgium, in 2002 respectively. Between 1996-2008 he worked for DG Information Society & Media (INFSO) of the European Commission (now DG CONNECT) mainly involved in the management of R&D projects in the fields of wireless and personal communications as well as networked media. .
11
SPEAKERS
GRAHAM CLULEY CYBERSECURITY EXPERT AND KEYNOTE SPEAKER
Graham Cluley is an award-winning independent cybersecurity keynote speaker, podcaster, and writer. He has been a well-known figure in the computer security industry since the early 1990s when he programmed the first ever version of Dr Solomon's Anti-Virus Toolkit for Windows. He has held senior roles in major cybersecurity companies such as Sophos and McAfee,
working with law enforcement agencies on investigations into hacking groups, and has regularly appeared on TV and radio explaining computer security threats. As a leading authority, Graham Cluley speaks at industry conferences, and helps raise awareness of AI and cybersecurity for some of the world's largest companies. Graham Cluley was inducted into the InfoSecurity Hall of Fame in 2011 and can be heard each week on the award-winning Smashing Security podcast.
REBECCA TAYLOR THREAT INTELLIGENCE KNOWLEDGE MANAGER AND RESEARCHER, SOPHOS
Rebecca joined Sophos in 2014 and has worked across a variety of roles including Business Operations and Incident Command. She moved into her Researcher role in 2022 in the X-Ops Counter Threat Unit. Here she focuses on the ingestion, management, attribution, and publication of threat intelligence, whilst also maintaining personas and collect across the dark web within the Human Intelligence Team. Her research is predominantly on data leaks, access brokers, and emerging threats including ransomware-as-a-service groups. Rebecca has been acknowledged in industry for her contributions, most recently winning Cybersecurity Professional of the Year at the Women in Tech Excellence Awards. She is also an active member of the cybersecurity community as a mentor, coach, public speaker, podcast host, TEDx speaker and co-author.
12
SPEAKERS
ALEXANDRA FORSYTH FOUNDER, PODCAST HOST AND PUBLIC SPEAKER
Alexandra Forsyth is an authoritative threat-intelligence leader who translates the fast-moving cyber landscape into clear, board-level strategy. With experience spanning retail, fashion and technology, she now guides global teams to anticipate risks before they strike, ensuring that security becomes a measurable business advantage.
Her TEDx talk, “Why We Need Community Now More Than Ever,” underscored her conviction
that culture—not code—ultimately keeps organisations safe. Alexandra is the host of the transatlantic podcast Take A Chance On You and developed the H.U.M.A.N. ROI Matrix, a human performance framework designed to help organisations identify hidden friction points.
JOE TIDY BBC FIRST CORRESPONDENT
Joe Tidy is a reporter, presenter, podcaster and author. As the BBC’s first Cyber Correspondent, he is the corporation’s definitive authority on hacking and digital warfare. With over a decade of experience, spanning Sky News and the BBC, he has been on the front lines of major global cyberattacks, reporting across television, radio, and digital platforms.
Joe is the author of Ctrl+Alt+Chaos and the presenter of the BBC's Cyber Hack: Evil Corp podcast series. His work investigates the dark side of teen hacking culture and why society is repeatedly failing to address the growing issue of teen cybercrime.
ROELOF TEMMINGH MANAGING DIRECTOR, VORTIMO (PTY) LTD
Roelof Temmingh has worked in cybersecurity and Open-Source Intelligence (OSINT) for more than 25 years. Trained as an engineer, he began his career in IT security and penetration testing, co-founding SensePost, one of the early security consultancies, which later became part of Orange Cyberdefense.
He went on to start Paterva, the company that created Maltego, widely used for data visualisation and relationship mapping in OSINT investigations. More recently he is building Ubikron, a platform and workbench for online and web-based intelligence tasks.
13
SPEAKERS
JENNY RADCLIFFE PEOPLE HACKER AND SOCIAL ENGINEER
Jenny Radcliffe, also known as The People Hacker, is a world-renowned social engineer hired to bypass security systems through a mixture of psychology, con-artistry, cunning and guile. A burglar for hire and entertaining educator, she has spent a lifetime talking her way into secure locations, protecting clients from scammers, and leading simulated criminal attacks on organisations of all sizes. Jenny has received many industry awards and was inducted into the InfoSec Hall of Fame in 2022. She is a sought-after global keynote speaker, podcast host, panel chair and interviewer, and author of People Hacker: Confessions of a Burglar for Hire.
CECILIE FJELLHØY CO-FOUNDER OF LOVESAID, FRAUD PREVENTION AND FINANCIAL SAFETY SPEAKER
Cecilie Fjellhøy is a compelling voice in fraud prevention and digital safety, best known as the whistleblower featured in Netflix’s documentary The Tinder Swindler. Her bravery in exposing digital deception has earned her international recognition and positioned her as an advocate for truth, resilience, and systemic reform in the fight against cyber fraud.
She is the co-founder of LoveSaid, an organisation committed to aiding victims of romance and confidence fraud by offering practical support, mental health resources, and specialised training for professionals combating fraud. Through her presentations and advocacy, she empowers individuals and organisations to recognise and combat fraud.
14
CELEBRATING EXCELLENCE IN CYBERSECURITY
CYBER AWARDS
CYBER AWARDS 2026
Following the successful launch of the CYBER AWARDS last year, MITA-NCC is delighted to present a new edition of the awards as part of this year’s conference.
The CYBER AWARDS celebrate innovation, excellence and outstanding contributions to Malta’s cybersecurity community. They recognise the individuals, organisations, projects and initiatives that are making a meaningful difference in strengthening cybersecurity practices and resilience across the sector.
More than an awards programme, the CYBER AWARDS aim to inspire higher standards, encourage continuous improvement and foster a culture of collaboration and knowledge-sharing within Malta’s cybersecurity ecosystem.
WHY THE CYBER AWARDS MATTER
Cybersecurity is a collective responsibility, and progress depends on the people and organisations willing to lead, innovate and share their expertise.
The CYBER AWARDS shine a spotlight on those who are helping to strengthen Malta’s digital resilience, from established leaders and innovative organisations to emerging talent and impactful community initiatives.
By recognising leadership, emerging talent, innovation, and community contribution, the awards celebrate achievements that set new benchmarks for the sector and inspire others to follow.
Together, we can continue to raise standards, share knowledge and build a safer, more resilient digital future for Malta.
15
CYBER AWARDS
THE AWARD CATEGORIES
For this year’s edition of the CYBER AWARDS there will be six distinct categories:
RISING STAR IN CYBERSECURITY
The Rising Star in Cybersecurity award celebrates emerging talent shaping the future of cybersecurity by recognising early-career professionals who have entered the field within the past two years. It honours recent graduates with up to two years of experience, career shifters transitioning into cybersecurity-specific roles, and professionals who have gained entry through industry-recognised certifications, specialised courses, or structured training programmes rather than a traditional degree.
TOP PERFORMER IN CYBER SKILLING PROGRAMME
The Top Performer in Cyber Skilling Programme award rewards excellence in cybersecurity training and professional development by recognising the top performer from the last three rounds out of seven of the Security Operations Centre (SOC) Analyst Training under the MITA-NCC Cybersecurity Skilling Programme. It honours exceptional dedication to learning, excellence across both practical and theoretical sessions, and significant progress demonstrated through strong cybersecurity proficiency.
CYBER LEADER OF THE YEAR
The Cyber Leader of the Year award recognises leadership that drives cybersecurity excellence and innovation by honouring senior-level cybersecurity professionals who demonstrate extraordinary leadership, forward-thinking practice, and a strong commitment to advancing cybersecurity excellence in Malta.
OUTSTANDING COMMUNITY CONTRIBUTOR
The Outstanding Community Contributor award celebrates individuals who actively strengthen the National Cybersecurity Community through consistent engagement, meaningful participation, and a visible commitment to collaboration throughout the calendar year. It recognises community members who go beyond passive membership by attending MITA-NCC events, showing a clear interest in contributing, and maintaining a positive presence that supports the growth, awareness, and resilience of the cybersecurity community. .
16
CYBER PROJECT EXCELLENCE IN THE PUBLIC ADMINISTRATION The Cyber Project Excellence in the Public Administration award highlights impactful cybersecurity projects that strengthen Malta’s public administration. It celebrates initiatives that make a positive and meaningful contribution to cybersecurity at organisational, sectoral, or national level, while recognising innovative approaches that address cybersecurity challenges through sound planning and modern practices. Through this category, MITA-NCC aims to encourage collaboration and set a benchmark for stronger cybersecurity across Malta
CYBER PROJECT EXCELLENCE IN THE PRIVATE SECTOR The Cyber Project Excellence in the Private Sector award recognises innovative cybersecurity projects that strengthen resilience across Malta’s private sector. It celebrates initiatives that make a positive and meaningful contribution to cybersecurity at organisational, sectoral, or national level, while highlighting modern approaches that address cybersecurity challenges through sound planning, practical execution, and effective collaboration. Through this category, MITA-NCC aims to encourage continued innovation and set a benchmark for stronger cybersecurity practices across the private sector.
17
CYBER AWARDS
MEET THE NOMINEES
RISING STAR IN CYBERSECURITY AWARD CYBER AWARDS NOMINEES 2026
STYLIANOS ALAVANTAS
MARIA YLENIA FARRUGIA
BURCIN SUER
TOP PERFORMER IN CYBER SKILLING PROGRAMME AWARD CYBER AWARDS NOMINEES 2026
NICOLE WEAVING-BALUCI
JURGEN CAMILLERI
NIKOLAOS VOURVACHIS
CYBER LEADER OF THE YEAR AWARD CYBER AWARDS NOMINEES 2026
BRIAN ZARB ADAMI
GEORGE ATANASE
ANTOINE DEBONO
18
CYBER AWARDS
OUTSTANDING COMMUNITY CONTRIBUTOR AWARD CYBER AWARDS NOMINEES 2026
KENNETH CIANGURA
HUBERT MICALLEF
INFORMATION MANAGEMENT UNIT
MINISTRY FOR SOCIAL POLICY AND THE FAMILY
IDENTITA’
MARK TONNA
CYBER PROJECT EXCELLENCE IN THE PUBLIC ADMINISTRATION AWARD CYBER AWARDS NOMINEES 2026
MALTA DIGITAL INNOVATION AUTHORITY
AX GROUP PLC
CYBER PROJECT EXCELLENCE IN THE PRIVATE SECTOR AWARD CYBER AWARDS NOMINEES 2026
CYBERSIFT
19
20
CYBER AWARDS
SPONSORS
SPONSORS
21
22
SPONSORS