In 2025, professional services ranked among the top three most affected sectors by ransomware globally, according to a threat intelligence report from QBE. So far in 2026, the sector remains in the top five. Two Australian law firms, one inContinue reading
Since 1 January 2026, Queensland schools have been operating under a new, mandatory set of obligations. The Child Safe Organisations Act 2024 introduced ten Child Safe Standards, overseen by the Queensland Family and Child Commission, and most schools now fallContinue reading
Farewell, SMS and voice authentication. We had a good run, but it’s finally coming to an end. From 1 September 2026, Microsoft will be using passkeys as its default authentication method in Entra ID (its access management and identity service),Continue reading
In brief Microsoft will make passkeys the default authentication method in Entra ID from 1 September 2026. Microsoft-provided SMS and voice authentication will be retired on 1 February 2027. Australian businesses should audit current MFA use, enable passkeys and allowContinue reading
Farewell, SMS and voice authentication. We had a good run, but it’s finally coming to an end. From 1 September 2026, Microsoft will be using passkeys as its default authentication method in Entra ID (its access management and identityContinue reading
In 2025, the Office of the Australian Information Commissioner received 1,205 data breach notifications, an 8 per cent increase over 2024 and the highest annual total since the Notifiable Data Breaches scheme commenced in 2018. Health service providers were theContinue reading
In June 2026, the Australian Taxation Office released scam data that should concern any organisation heading into tax time. The ATO received 1,547 reports of ATO impersonation scams in June alone, a 12% increase from May. Because this data reliesContinue reading
Many organisations invest heavily in cyber security policies, frameworks, compliance initiatives and technology platforms. Yet despite this investment, leaders often remain uncertain whether their cyber governance is actually improving. The reason is simple. Good cyber governance is not created byContinue reading
Ever heard of the Smart Device Security Standards? A lot of Australian businesses have no idea what this law is, which is a problem because it’s been in place since March 2026. The rules cover security for smart devices andContinue reading
If you run a small or medium business in Australia, there is a piece of legislation you need to understand. It has been reshaping how businesses respond to ransomware since May 2025, and the government is now actively enforcing it.Continue reading