SecurityBrief Australia - Technology news for CISOs & cybersecurity decision-makers
Australia

Australian Signals Directorate Stories

Australian Stories

Australian Signals Directorate stories

The Essential Eight is being retired, here's what that means for your cyber programme
Software-as-a-Service

The Essential Eight is being retired, here's what that means for your cyber programme

Organisations will need to widen cyber planning beyond a checklist as Australia moves to replace the Essential Eight with risk-based Essentials guidance.

By Tony Rabottini • 4 min read • This month
Australia replaces Essential Eight with new Essentials
Software-as-a-Service

Australia replaces Essential Eight with new Essentials

Australian businesses face a new cyber baseline as regulators move to align guidance with cloud, SaaS and AI-driven threats.

By Mark Tarre • 4 min read • This month
Why SMS authentication is exposing mortgage lenders to avoidable risk
Network Security

Why SMS authentication is exposing mortgage lenders to avoidable risk

Mortgage brokers face mounting breach and fraud risks as attackers exploit SMS codes to reach high-value client data, experts warn.

By Geoff Schomburgk • 5 min read • This month
Australian banks lag on strict DMARC email protection
Data Protection

Australian banks lag on strict DMARC email protection

Most customers still face avoidable phishing risk, as 59% of Australian banks lack the strict DMARC setting that blocks spoofed emails.

By Mark Tarre • 4 min read • This month
Phishing-resistant authentication can prevent tax-time fraud
Multi-factor authentication

Phishing-resistant authentication can prevent tax-time fraud

Fraudsters are exploiting tax season by stealing credentials and filing bogus returns, putting Australian refunds and ATO accounts at risk.

By Anthony Caruana • 5 min read • Last month
Microsoft & Australia sign digital resilience deal
Digital Transformation

Microsoft & Australia sign digital resilience deal

Australia will get wider support to defend critical digital systems as Canberra and Microsoft deepen cooperation on cyber security and AI.

By Mark Tarre • 4 min read • Last month
Australia leads in self-hosted AI use, JFrog finds
DevOps

Australia leads in self-hosted AI use, JFrog finds

The survey also found most firms still lack secrets scanning and rapid audit proof, leaving hidden credentials and compliance delays as weak spots.

By Sean Mitchell • 5 min read • Last month
Orca Opti launches free AI governance tool for Australia
Data Protection

Orca Opti launches free AI governance tool for Australia

Regulated employers can now test their AI controls in minutes, as the Brisbane firm targets stricter data rules and workplace leak risks.

By Mark Tarre • 4 min read • Last month
Australia warned over quantum cyber security risks
Data Protection

Australia warned over quantum cyber security risks

Government and critical infrastructure operators may need years to upgrade vulnerable encryption before quantum computers make it obsolete.

By Mark Tarre • 4 min read • Fri, 29th May 2026
Why Australian SMEs can't afford to treat cybersecurity as an afterthought
Disaster Recovery

Why Australian SMEs can't afford to treat cybersecurity as an afterthought

Rising attack volumes are exposing under-resourced SMEs to downtime, lost contracts and regulatory risk unless security is built in now.

By Corp IT • 5 min read • Fri, 22nd May 2026
Australian firms lag on post-quantum crypto readiness
Data Protection

Australian firms lag on post-quantum crypto readiness

Only 11% of organisations are confident they can meet post-quantum deadlines, as legacy systems and tight budgets slow Australian preparations.

By Sean Mitchell • 5 min read • Tue, 19th May 2026
Snowflake wins IRAP approval in Google Cloud Melbourne
Hybrid Cloud

Snowflake wins IRAP approval in Google Cloud Melbourne

Australian government agencies can now use Snowflake on Google Cloud in Melbourne for PROTECTED workloads, broadening cloud choice and assurance.

By Mark Tarre • 4 min read • Mon, 18th May 2026
Compliance is not the same as resilience: What Australian organisations are missing beyond the Essential Eight
Data Protection

Compliance is not the same as resilience: What Australian organisations are missing beyond the Essential Eight

Australian firms face growing cyber gaps as insurers and clients demand evidence of controls beyond the Essential Eight, amid new AI threats.

By Tony Rabottini • 5 min read • Mon, 11th May 2026
BeyondTrust expands identity security insights to Australia
Hybrid Cloud

BeyondTrust expands identity security insights to Australia

Local firms in regulated sectors can now keep identity security data onshore as scrutiny over machine and AI access intensifies.

By Mark Tarre • 4 min read • Mon, 4th May 2026

Global Stories

Australian Signals Directorate stories

Infoblox to buy Kentik in network observability push
Hybrid Cloud

Infoblox to buy Kentik in network observability push

The deal could give enterprises a fuller view of hybrid networks as AI-driven operations and security tools demand cleaner traffic data.

By Mark Tarre • 4 min read • This month
Five Eyes warns AI heightens cyber risk & sovereignty
Software-as-a-Service

Five Eyes warns AI heightens cyber risk & sovereignty

Boards are being urged to overhaul defences as AI speeds attacks and exposes firms to foreign vendors' access risks.

By Mark Tarre • 4 min read • This month
Certes says be ready to protect data before Q Day hits
Data Protection

Certes says be ready to protect data before Q Day hits

Only 3% of Australian businesses have started preparing for post-quantum cryptography, leaving sensitive data exposed to harvest-now, decrypt-later attacks.

By Anthony Caruana • 5 min read • Fri, 29th May 2026
World Password Day shifts focus to AI identity risks
Firewalls

World Password Day shifts focus to AI identity risks

Attackers are exploiting passkeys, stolen sessions and AI-generated scams, exposing gaps in identity security beyond the login screen.

By Mark Tarre • 7 min read • Thu, 7th May 2026