Strategic Security
Insights
Clear, actionable cybersecurity insights backed by real-world experience to help your organisation make smarter, risk-informed decisions.
Essential 8 is Retiring – Here’s What You Need to Know!
For almost a decade, the Essential Eight has been the de facto baseline for cybersecurity in Australia. Developed by the Australian Signals Directorate (ASD) and published through the Australian Cyber Security Centre (ACSC), it has given organisations a practical,...
ISO42001 Simplified
ISO/IEC 42001:2023 is the world's first international standard for AI management systems. Published in December 2023, it sets out how organisations should govern, manage and continually improve the way they develop, provide or use artificial intelligence....
The Trivy breach that affected 1,000’s
In March 2026, attackers compromised the release pipeline of Trivy, a widely used open-source vulnerability scanner, distributing a credential stealer through official channels; the poisoned tool was auto-installed by LiteLLM's build pipeline and used to...
Exception Management
Exception management is a critical business tool that is often overlooked or not leveraged in the right way. When used properly, it gives organisations the ability to adapt to risks, take a more flexible approach, and reduce resource overheads and costs, all while...
Why Penetration Testing is Critical for Your Cybersecurity Posture
The cyber threat landscape is evolving at an unprecedented pace. Threat actors today are more organised, more resourced, and more persistent than ever before. A single incident can cause lasting damage, impacting revenue, eroding customer trust, triggering compliance...
Recall or Regret?
Microsoft Recall is a new AI feature built into Windows 11 for Copilot+ PCs, designed to help users find information they have previously viewed on their computer – even if they can’t remember when or where. It works by quietly taking snapshots every few seconds or...
2025 Tax Time Scams
Once again, everyone’s favourite annually scheduled season has returned. Tax time scams continue to present a prime opportunities for threat actors. But in 2025, their methods have evolved. With increasingly convincing AI-enabled phishing attempts, sophisticated use...
Quantum Computing & Cybersecurity
The Hype vs. The Reality AI may be dominating the headlines right now, but another question I’m increasingly hearing from boards and executives is about quantum computing — and whether it poses a real threat to their business. While quantum computing has been hitting...
The Symbiotic Relationship Between AI and Cybersecurity
AI and cybersecurity sit at the centre of today’s digital revolution. While AI brings transformative potential, it also introduces new risks — making the relationship between AI and cybersecurity a dynamic, double-edged sword. As businesses increasingly rely on both,...
The Dark Side of AI
The Dark Side of AI: The Cyber Threats Worth Talking About AI is no longer a futuristic concept — it’s embedded in our daily lives. As AI rapidly evolves, so does the threat landscape surrounding it. While AI has revolutionised industries and improved convenience, its...
The Final Countdown for PCI DSS 4.0.1 Best Practices
When PCI DSS version 4.0 was released in March 2022, it introduced a range of updates designed to modernise payment security and address evolving threat landscapes. Among these changes were 48 new requirements that were initially classified as best practice — giving...
Cyber Security Act 2024 – Frequently Asked Questions (FAQ)
Although the Cyber Security Act 2024 appears as a significant shift in the trajectory and expectations of Cyber Security practices in Australia, there are a few questions that begin to arise when attempting to completelty understand the new legislation. According to...