A compromised laptop, 50 pre-signed Ethereum authorisations and a race against stablecoin freezes. A plain-English deep dive into the largest crypto theft on record, and what it teaches small businesses.
Inside the Binance hack: how US$6.3 billion vanished in 20 minutes Read More »
Security researchers reported dozens of attacks driven by AI agents last month. Here is what actually changed, and why the basics still decide who gets breached.
October 2026: AI-run cyber attacks moved from theory to the real world Read More »
A backup app credential gave attackers a path into live mailboxes and files across many businesses. Third-party app access is now one of the biggest blind spots in Microsoft 365.
The Australian Cyber Security Centre issued two critical alerts last month. If you run a NetScaler gateway or any PHP website, these are the steps to take.
ACSC critical alerts in October: Citrix NetScaler and PHP, and what to patch first Read More »
Attackers are now going after the API keys that power your AI tools. A popular AI library shipped a credential stealer for about 100 minutes in October.
Your AI keys are now a target: lessons from the LiteLLM supply chain attack Read More »
A prioritised path through the ACSC Essential Eight for organisations without a full-time security team.
Essential Eight: where small businesses should start Read More »
Ransomware targets backups first. Here is how to make yours immutable, tested and separated from admin accounts.
Backups that actually survive ransomware Read More »
Who to call, what to isolate and what not to delete in the first hour of a cyber incident.
The SMB incident response one-pager Read More »
A plain-English comparison of Security Service Edge and Secure Access Service Edge for growing teams.
SSE vs SASE: which does your business need? Read More »
How VLANs and a properly tuned firewall stop one compromised laptop from reaching your finance server.
How to segment a flat network Read More »