A critical vulnerability does not become a governance issue only when an attacker exploits it. The governance issue begins earlier: when an organisation cannot prove that security advisories are identified, assigned, escalated and remediated within defined timeframes. That is the...
The Australian Information Commissioner (OAIC) regularly releases statistics on data breaches reported under the Notifiable Data Breaches (NDB) scheme. This information helps organisations and the public stay informed about the privacy risks identified through the scheme. The rising number of...
The menace of cybercrime has hit every third business in town, even the cloud data management and data security firm Rubrik. The firm has confirmed being targeted by a ransomware group by exploiting Rubrik’s GoAnywhere zero-day vulnerability. Fortra, which was...
Background The Microsoft Threat Intelligence Center (MSTIC) has released information on the uncovering of a widespread malicious email campaign undertaken by the activity group that Microsoft tracks as NOBELIUM. Nobelium, which operates from Russia, is the name given to the threat actor behind...
From 22 February 2018, it became a requirement for certain data breaches, known as “eligible data breaches”, to be notified to the Australian Privacy Commissioner and affected individuals. Previously, it was not mandatory to supply notification of data breaches. A...
Cloud computing has been adopted by almost every organization due to its various benefits and work flexibility. However, with this adoption of the cloud, certain cybersecurity issues have been observed in cloud computing. Approximately 94% of organizations are moderate to...
Australian organizations are continually failing to fend off ‘inevitable’ and costly cyber-attacks! Watchdog rips into NZX for repeated tech fails & OAIC finds 'multiple' Australian companies downplaying data breaches. A recent study has reported that Australian businesses and organizations are...