Show Notes
Quantum computers will one day break the cryptography that protects almost everything online. The harder questions are how much of the alarm is warranted, and what security leaders should be doing now.
David Savva-Willett is joined by Geoff Schomburgk, Regional Vice President for Asia Pacific and Japan at Yubico, and Alex Wilson, who leads solutions engineering for the region. They unpack harvest now, decrypt later and how much of it is a device for grabbing attention; what it took to get post-quantum algorithms running on the secure element inside a YubiKey; and why crypto agility, not any single algorithm, is the thing to design for.
The conversation turns to authentication, where passkeys are becoming the root of trust for digital wallets, mobile driver licences and financial transactions, and to the difference between device bound and copyable passkeys that many organisations have not thought through. Both guests make the case that this is a project management and governance problem rather than a technology one, and that the apocalyptic framing does more harm than good.
More from Cyber Voices
Recorded on the CyberCon 2026 expo floor in Melbourne, this episode sees host David Savva-Willett sit down with Keren Elazari, the friendly hacker, the day after her keynote closed out day one of the conference. Keren is the founder of BSidesTLV and Leading Cyber Ladies, a senior researcher at Tel Aviv University, and the speaker behind one of TED's most watched talks on why the world needs hackers.
Recorded on day three of CyberCon 2026 in Melbourne, the first episode of the Cyber Voices CyberCon series brings AISA Chair Michael Burchell back into the booth with host David Savva-Willett. Close to 5,800 delegates came through the doors this year, a record for the conference, and the pair reflect on what made it work: a program with a record number of speakers presenting for the first time, a deliberate focus on cyber while a global trend pulls conferences towards AI, and a community that turns up to share what it has learned.
There was a pen on the table at a workshop. Placed next to an unlocked phone, it opened the browser and loaded the facilitator’s website, with nobody tapping anything and nobody agreeing to anything.
Information stealing malware is not new and not sophisticated. That is precisely what worries Jesse Hoppo, who leads the open source intelligence and cyber crime team within Telstra's Threat Research and Intelligence Group, and who spends a good deal of his time reading what these things send home.
Governance, risk and compliance generates a great deal of manual work, and not all of it is work anyone would miss. Ian Yip's argument is that this is exactly where AI earns its place in a security team, provided nobody mistakes it for judgment.