Latest News
Vulnerability assessments identify potential weaknesses, while penetration testing validates what an attacker could actually exploit. Learn how they differ and why organisations often benefit from both.
The Essential Eight provides Australian organisations with eight practical cyber security strategies to reduce risk. Learn what each strategy covers, how maturity levels work and how to start improving your security posture.
Zammad vulnerabilities CVE-2026-102489 and CVE-2026-102490 require attention from organisations running self-hosted installations. Learn which versions are affected and how to reduce exposure.
FortiMail zero-day CVE-2026-104286 affects internet-facing email security appliances. Learn what the vulnerability means, who is affected and what organisations should do now.
Steam's BrokenPipe vulnerability allows an unprivileged Windows user to escalate to SYSTEM through the Steam Client Service. With no patch available, organisations should review exposure and apply mitigations.
Passkeys provide strong protection against credential theft, but attackers are targeting the human layer through passkey-themed social engineering. Learn what these attacks mean for cloud security.
A critical WSO2 API Manager vulnerability allows attackers to forge administrative JWT tokens and gain unauthorised access. Organisations should patch affected systems and check for signs of compromise.
Microsoft’s September 2026 Patch Tuesday includes nearly 974 fixes and two actively exploited Windows zero-days. Learn how to prioritise the release based on exploitation and exposure.
A critical Cisco Firewall Management Center vulnerability is under active attack, allowing unauthenticated attackers to gain root access. Organisations should patch immediately and check for compromise.
CVE-2026-8452 was originally rated as a denial-of-service flaw but is now being exploited for remote code execution. Learn what Australian organisations should do.
APRA CPS 234 requires regulated entities to maintain effective information security capabilities, test their controls, manage third-party risks and notify APRA of material incidents.
A critical GitLab flaw is under active attack. Organisations running self-hosted GitLab should patch immediately, review projects for tampering and rotate exposed secrets.