Supply chain cyber security: what your organisation still owns when a supplier is breached
When a supplier is breached, the problem doesn't stay with the supplier. You may still have customers to contact, regulators to notify and legal obligations to work through.
...
Weekly Cyber Brief: 9 November 2026
This week's three stories have something in common: systems many organisations rely on, but someone else looks after.
...
Why healthcare leads Australia's data breach notifications
Health service providers made 149 of the 667 data breach notifications received by Australia's privacy regulator from January to June 2026, more than any other sector.
...
Firewall and VPN security: why attackers target the devices meant to keep them out
Firewalls and VPNs have to be reachable from the internet, and most can't run the security tools that watch laptops and servers. That makes them an attractive way in.
...
Weekly Cyber Brief: fake help desks, exploited VPNs and a hack the business missed
This week's risks came in through tools staff use every day: chat, remote access and free software.
...
Free download: the Government's cyber threat report, in two pages
The Australian Signals Directorate's Annual Cyber Threat Report 2025-26 is 68 pages long. We've pulled out the five facts that matter most to mid-sized organisations, plus ten questions to put...
ASD Cyber Threat Report 2025-26: what it means for mid-sized organisations
The Australian Signals Directorate's Annual Cyber Threat Report 2025-26 shows each cybercrime now costs a medium-sized business $141,300 on average, up 45% in a year. That is close to the...
Critical PHP flaws: what Australian organisations need to do
Two critical security flaws in PHP, known together as PHP2Shell, can let an attacker take control of a web server without a password. PHP is the programming language behind about...
The Privacy Act exemption your business just lost
Your business was exempt from the Privacy Act. For one part of what you hold, it isn't any more.
...
The 10 steps to AML/CTF readiness, and the 5 we can help with
There are ten steps to being ready. Five are decisions for your business and your advisers. The other five are about the technology those decisions run on: the email, file...
The seven places a client's licence ends up
On a Tuesday morning a client emails your office a photograph of her driver's licence. She has taken it on her phone, at her kitchen bench, because your onboarding email...
Technology, the Privacy Act and AML/CTF: where to start
It is a Saturday morning in spring and the open house is busy. Somewhere between the kitchen and the second bedroom a couple stop talking to each other and start...
Get the Cyber Brief
Clear, practical updates on the cyber threats facing Australian businesses, and what to do about them. Sent every Tuesday morning.
