Cybersecurity News & Advice for Australian Businesses
This category brings together security alerts and practical cybersecurity advice for Australian small and medium businesses and home users. We cover actively exploited vulnerabilities, urgent patches, research on how attacks happen and the everyday steps that keep staff, accounts and data safe, in plain English and without the scare tactics.
Articles here include critical flaws in widely used products, such as Cisco SD-WAN Manager, Citrix NetScaler and self-hosted Atlassian Data Center tools, along with Microsoft’s 2026 research on stolen logins and posts on AI and security: a free vulnerability scanner for small IT teams, AI-generated bug reports, and unauthorised access to Australian government systems. Each post explains who is affected and what to check or do next.
A few basics protect most businesses against the most common attacks:
Turn on multi-factor authentication for email, Microsoft 365, remote access and any other system that supports it.
Apply security updates promptly, starting with internet-facing systems such as firewalls, VPNs and remote access gateways.
Keep regular backups, store at least one copy separately from your main systems, and test that you can restore from them.
Help staff recognise phishing emails and suspicious requests, particularly requests to change bank details or approve payments.
The Australian Cyber Security Centre’s Essential Eight is a useful framework for deciding what to improve next, and incidents can be reported through ReportCyber on cyber.gov.au.
The Fake ATO Payment Message Doing the Rounds Right Now
A fake ATO payment message is tricking people into installing remote-access software. Here's how the scam works and what to tell your team.
Read more →What ASIC’s $1.35m Cyber Fine Means for Your Business
The corporate regulator has just handed down its second multi-million-dollar cybersecurity penalty against a financial services business in the space of eight months — and neither case involved exotic hacking. Both came down to basic controls that any business, not just a licensed financial firm, can check today. On 12 October 2026, the Supreme Court […]
Read more →A New Malware Trick Hides Inside Your Browser Cache
A new ClickFix malware variant hides payloads inside browser cache disguised as images, bypassing standard antivirus checks. Here's what matters.
Read more →Exchange Server 2016/2019: Patches End in October
Exchange Server 2016 and 2019 lose all security updates — including paid ESU coverage — by the end of October 2026. Here's what to check.
Read more →A Free Vulnerability Scanner for Small IT Teams
Anthropic's Cyber Mission includes a free, open-source vulnerability scanner open to security teams of any size.
Read more →When AI Security Reports Become Noise
Google paused its open-source bug bounty after a flood of AI-hallucinated reports. A lesson for anyone evaluating AI security tools.
Read more →Microsoft’s 2026 Report: Stolen Logins Are Now the #1 Way In
Microsoft's 2026 Digital Defense Report finds identity compromise behind 78% of attacks. Here's what that means for your logins.
Read more →Critical Cisco SD-WAN Manager Flaw Under Active Attack
Cisco confirms active exploitation of a critical, 9.8-severity auth-bypass flaw in SD-WAN Manager. No workaround — patch now.
Read more →Urgent: Critical Citrix NetScaler Flaws Under Active Attack
Citrix confirms active exploitation of critical NetScaler ADC/Gateway flaws. ACSC and CISA urge immediate patching.
Read more →OpenAI’s Unauthorised Access to Australian Government Systems
OpenAI accessed Australian government systems, including Medicare data, without authorisation. Here's what it means for your own AI tools.
Read more →