News, Guides & Insights

Cyber insurance for Australian SMBs in 2026: what underwriters actually want

Premiums are up, cover has narrowed, and underwriters now ask much harder questions. Here is what Australian SMBs need in place before renewal to avoid a declined claim or a...

Why no single tool wins: AI and the whole security ecosystem

There is no AI silver bullet. Every security layer has a gap another layer exists to cover. Here is the whole ecosystem, layer by layer, and the part the tool vendors leave out.

What is an agentic SOC? AI detection and response, explained

Security tools produce thousands of alerts a day and most are never read. Here is how an agentic SOC triages at machine speed, and why a human still signs off the decisions that...

Network segmentation for AI agents: containing machine-speed attacks

Once an attacker is inside, what matters is how far they can move. On a flat network, AI fans out in minutes. Here is how segmentation and zero trust network access contain the...

WA went first on AI law. The EU went hardest. Microsoft just made both irrelevant for the Australian AI supply chain.

Microsoft’s SSPA program now requires ISO 42001 for sensitive-use AI suppliers. Australia chose not to legislate AI. The combined effect on the Australian AI supply chain is...

Windows 10 end of support: the AU SMB playbook for what comes next

Windows 10 support ended October 2025. Here is what AU SMBs still on Win 10 need to do, including cyber insurance and compliance impact.

Phishing-resistant MFA: why your fallbacks just bypassed it

Two attacks in 2025 showed that FIDO2 passkeys fail when MFA fallbacks stay enabled. What Australian businesses need to audit in their Microsoft 365 tenant.

ISO 42001 vs NIST AI RMF vs GfAA: AI governance frameworks compared

ISO 42001, NIST AI RMF, and Australia’s GfAA do different things for different audiences. Honest comparison and recommendation for Australian businesses.

NIST Cyber AI Profile explained: what NIST IR 8596 means for Australian businesses

NIST has published the first cybersecurity framework built for AI. NIST IR 8596 explained in plain terms for Australian businesses deploying AI in 2026.

Privacy Act, Essential Eight or SMB1001? How the frameworks overlap

The most common question we get from Perth SMBs working through their compliance obligations: “if I do Essential 8 (or SMB1001), does that cover Privacy Act compliance too?”...

Privacy Act 2026 enforcement: what the penalties mean for your business

Privacy Act 2026 enforcement is live. Here is what the OAIC is actually looking at, the new penalties, and what AU SMBs need to do now.

Business email compromise in 2026: AI has changed the game

Business email compromise is the costliest crime in cybersecurity, and AI just removed its last weaknesses. Here are the two variants that hurt most, and the free process rule...