Cyber threats don’t just compromise systems—they affect people. This session explores how phishing, account takeovers, defacing, and disinformation translate into real-world harm for users and communities. Attendees will learn how cyber risks erode trust, reputation, and safety, and why traditional/technical security measures alone aren’t enough. Takeaways include: understanding the human impact of cyber threats, practical strategies to embed cyber risk awareness into trust and safety policies, and actionable steps to strengthen resilience while protecting user confidence.

Adult platforms have systems to check consent, but they are limited, and AI-generated pornography makes the gaps even wider. This talk explores how consent is (and isn’t) verified today, the risks posed by AI deepfakes, and why we need stronger infrastructure now before technology races ahead of ethics.

This session will provide an in-depth overview of intimate image abuse, including key terminology and the legal framework in the UK, as well as platforms’ obligations and what they may expect from regulators in the future. Through an informal conversation led by James interviewing Emily, the discussion will explore offending patterns and case studies, highlighting the scale of the problem and some of the lesser-known or surprising ways victimisation and abuse can occur. The session will also cover the work of StopNCII and the Revenge Porn Helpline, and how platforms can get involved, alongside practical strategies to prevent victimisation and revictimisation. Finally, the conversation will touch on how partnerships can be leveraged to reduce intimate image abuse, drive operational efficiencies, and ensure a proactive approach to tackling this issue.

Fraud doesn’t “just happen.” In fact, it is often baked into systems and controls. Every workflow, API, and policy choice creates openings that fraudsters are quick to exploit. They don’t compromise flaws in designs; they use them exactly as intended. From frictionless onboarding and open integrations to refund policies and “trust” signals, the very features that drive growth can become attack surfaces. And when human factors like urgency, empathy, and overconfidence enter the mix, those vulnerabilities multiply. This session will examine how the potential for fraud is often designed into our systems. The audience will learn how to identify weak points early, integrate threat modeling into product decisions, and create systems that protect both the business and its customers.

In today’s dynamic security landscape, organizations rely on a blend of internal solutions and third-party integrations to effectively detect and address malicious activities. This reliance, however, presents challenges for security teams who must maintain autonomy while managing their responsibilities, particularly when critical aspects like tool performance rest in the hands of third-party vendors. This can lead to conflicts in strategy, execution, and accountability. In this session, we will explore how Vinted navigates the complex world of security ecosystems, with a particular focus on partnerships with third-party vendors. By examining these relationships, attendees will gain insights into strategies for overcoming associated challenges. We will discuss tailored solutions across product, engineering, and data science and analytics that enhance collaboration and optimize outcomes.