News, Guides & Insights

The agentic SOC: how AI is changing detection and response

Security tools produce thousands of alerts a day and most are never read. Here is how an agentic SOC triages at machine speed, and why a human still signs off the decisions that...

Network segmentation in a world of autonomous AI agents

Once an attacker is inside, what matters is how far they can move. On a flat network, AI fans out in minutes. Here is how segmentation and zero trust network access contain the...

WA went first on AI law. The EU went hardest. Microsoft just made both irrelevant for the Australian AI supply chain.

Microsoft’s SSPA program now requires ISO 42001 for sensitive-use AI suppliers. Australia chose not to legislate AI. The combined effect on the Australian AI supply chain is...

Windows 10 end of support: the AU SMB playbook for what comes next

Windows 10 support ended October 2025. Here is what AU SMBs still on Win 10 need to do, including cyber insurance and compliance impact.

Phishing-resistant MFA: why your fallbacks just bypassed it

Two attacks in 2025 showed that FIDO2 passkeys fail when MFA fallbacks stay enabled. What Australian businesses need to audit in their Microsoft 365 tenant.

ISO 42001 vs NIST AI RMF vs Australia’s GfAA: which AI governance framework should your business adopt

ISO 42001, NIST AI RMF, and Australia’s GfAA do different things for different audiences. Honest comparison and recommendation for Australian businesses.

NIST Cyber AI Profile explained: what NIST IR 8596 means for Australian businesses

NIST has published the first cybersecurity framework built for AI. NIST IR 8596 explained in plain terms for Australian businesses deploying AI in 2026.

Privacy Act, Essential 8, and SMB1001: how the three frameworks overlap for AU SMBs

The most common question we get from Perth SMBs working through their compliance obligations: “if I do Essential 8 (or SMB1001), does that cover Privacy Act compliance too?”...

Privacy Act 2026 enforcement: what AU SMBs need to know before the regulator arrives

Privacy Act 2026 enforcement is live. Here is what the OAIC is actually looking at, the new penalties, and what AU SMBs need to do now.

Business email compromise just got an AI upgrade

Business email compromise is the costliest crime in cybersecurity, and AI just removed its last weaknesses. Here are the two variants that hurt most, and the free process rule...

Your staff versus the deepfake: how AI is changing the human layer

Attackers no longer send clumsy emails. They clone your CEO’s voice and join video calls wearing your CFO’s face. Here is how to defend the human layer, the one target...

Vulnerability management when attackers scan faster than you can patch

Most businesses patch by severity score and run out of time before reaching the flaws attackers actually use. Here is how to prioritise by real-world exploitability and cut your...