Brendan Smith, GAICD

Some key highlights from Australian Signals Directorate (ASD)'s Cyber Threat Report 2024–2025: 1. There is a significant rise in cyber incidents and reports: The Australian Cyber Security Centre (ACSC) reported that in during 2024-2025 they have responded to over 1,200 major cybersecurity incidents which is a 11% increase from the previous year. 2. There is a steep rise in the financial impact due to cybercrimes: For businesses, the average loss due to cybercrimes is on the rise, Small businesses lost up to $56,571 a 14% increase from last year, Medium business lost up to $97,166 a 55% increase, and Large businesses lost up to $202,691 a 221% increase. It was also reported that an individual average self reported loss was $36,633 3. Critical infrastructure under increasing threat: Critical infrastructures have received notifications of 190 potential malicious cyber activity impacting their network which is a 111$ increase from last year. The Top 3 most common types of activity which led to infrastructure related incidents were: Scanning or Reconnaissance making up 41% DoS/DDoS making up 31% Phishing making up 20% 4. Credential compromise, email attacks and phishing remain the main methods of attack: It was reported that email compromise with no direct financial loss accounted for ~19% of business reports, Business email compromise with financial loss ~15%, identity fraud ~ 11% and phishing emails remains one of the most common attack methods. 5. New technologies are amplifying the risk like AI The report also warns the rise in the use of Generative AI by cybercriminals as they use these tools to automate the analysis of extensive datasets which allows them to find vulnerabilities, they also use generative AI to create content like videos, text, fake voices, websites etc. to help them trick their target easier. 💡 The big moves organisations must take: a. Implement Effective event logging - You can't defend what you can't see b. Manage legacy IT risks - Legacy technology lets threats thrive c. Effective Third-Party Risk Management (TPRM) - Shut the back door, choose sercure and verifable technologies d. Start preparing for Post Quantum Cryptography (PQC) more details: https://lnkd.in/gCVf9fSq

7

Introducing Cyber Assure AI Pty Ltd Cyber Assure AI is a specialised cyber security advisory firm supporting government and enterprise organisations in strengthening their security posture, managing cyber risk, and meeting regulatory and industry security requirements. Our services focus on security assurance and independent assessments, including IRAP security assessments aligned with the Australian Government Information Security Manual (ISM), as well as advisory and assessments aligned with frameworks such as the Essential Eight maturity model, ISO/IEC 27001, and PCI DSS. We work with organisations to evaluate the effectiveness of their security controls, identify gaps, and provide practical, risk-based guidance to strengthen security across modern enterprise and cloud environments. Through this page we will share insights on cyber security governance, security assurance, and security architecture relevant to both government and enterprise environments. #CyberSecurity #IRAP #EssentialEight #ISO27001 #PCIDSS

1

The cyber threat to New Zealand organisations is increasing - and the latest New Zealand Security Intelligence Service report is a timely reminder to prepare. For NGOs, charities and social services organisations, it's especially urgent. You hold highly sensitive data and work with people who are already vulnerable. Preparedness isn't just about prevention. It's about knowing how you will respond. Because a technical fix is only half of the problem. Within hours, clients, staff, funders, partners and media will all be asking questions - before you have all the answers. That's where trust and reputation can be won or lost. Baines recently helped a large New Zealand charity prepare its communications response to a cyber attack - thinking through who needs to know what, when, and how to communicate when the picture is still unclear. One of the best things you can do is work this all out before you need it. Who needs to be involved? Who needs to be told? What do you say when you don't have all the answers? And how do you keep people informed as the situation unfolds? If your organisation needs to prepare for the communications side of cyber risk, we can help. Read more: https://lnkd.in/e6trAEBK #cyberattack #charity #NGO

6

1 Comment

ASD Releases Annual Cyber Threat Report 2024-25 Highlighting Rising State-Sponsored and Cybercrime Risks 📅 Date: 14 October 2025 📍 Source: Australian Cyber Security Centre (ACSC) 🛡 Subject: Cybersecurity – Key Highlights: 🔧 Case Overview: The Australian Signals Directorate (ASD) has published its sixth Annual Cyber Threat Report (ACTR), covering the financial year 2024–25. The report underscores the growing risks posed by state-sponsored actors targeting Australian government networks, critical infrastructure, and businesses. Cybercriminal activity, including ransomware attacks and data breaches, has also increased, threatening economic and social prosperity. 🔍 Findings: State-sponsored cyber actors remain a serious and evolving threat, driven by strategic objectives. Cybercriminals continue to exploit vulnerabilities for financial gain, emphasizing the need for robust cyber defenses. Key focus areas recommended by ASD for organizations and network owners: Implement best-practice logging. Replace legacy technology. Manage third-party risk. Prepare for post-quantum cryptography. 💼 Regulatory Implications: The report signals the importance of proactive cybersecurity measures for all sectors, from government to private businesses. Organizations are encouraged to strengthen resilience, comply with guidance, and mitigate potential impacts of cyber threats on critical operations. 📌 Strategic Insight: Cybersecurity is no longer optional—state-sponsored and financially motivated cyber threats are increasingly sophisticated and pervasive. Staying ahead requires continuous investment in technology, staff awareness, risk management, and alignment with national cybersecurity frameworks. Link: https://lnkd.in/giRsY3hX 🔔 Follow RegLex for updates on global cyber threats, risk mitigation strategies, and regulatory guidance shaping cybersecurity practices in Australia and beyond. #CyberSecurity #ASD #RegLexUpdates #StateSponsoredThreats #Ransomware #CriticalInfrastructure #RiskManagement #CyberResilience #DataProtection #AustraliaCybersecurity

1

Fortian's November 2025 cyber environment update is now available on the website! November saw steady activity across Australia’s cyber landscape, including new government sanctions on North Korea and Russia, emerging AI-enabled threats and several notable breaches affecting local organisations. Check out this month’s update written by SOC analyst Allan Grant on our website: https://lnkd.in/gnbwGb6Z

8

A focused cyber security consultation gives you clarity. It translates risk into business language, shows where your controls stand today, and sets a practical path to stronger resilience. If you lead an Australian organisation that must manage Essential Eight maturity, prepare for ISO 27001 or NIST alignment, or meet DISP obligations, a structured consultation is the fastest way to understand what matters, what to fix first, and how to fund and deliver it without disruption. This guide explains what a consultation involves, how it differs from ongoing advisory and project delivery, how it maps to key frameworks, and why leadership engagement is essential. You will also see how White Rook Cyber runs consultations for businesses across Australia. Read the full guide linked below. 📞 1300 794 777 🌐 https://lnkd.in/gkeHNwJH #whiterookcyber #cybersecurity #cybersecurityaustralia #australianbusinesses #cybersecurityconsultant #cybersecurityconsultation #cybersecurityconsulting #cybersecurityexperts #aussiesmallbusiness #aussiebusinesses #managedcybersecurityaustralia #australiabusinesses #australiabusiness #australiansmallbusiness #australianbusinesswomen #australianbusiness

2

📣 As the recent ManageMyHealth incident and NCSC announcements show, New Zealand cannot afford to get complacent about cybersecurity...   ► The ransom hack on New Zealand's largest health portal is being billed as one of the country's biggest cybersecurity incidents - hackers threatening to release more than 400,000 documents stolen from about 126,000 Manage My Health patients if the private company fails to pay $60,000.   ► It's also been a massive period for the National Cyber Security Centre (NCSC). Recently, they took an unprecedented step - proactively reaching out to 26,000 New Zealanders to warn them their devices may be compromised by Lumma Stealer malware. This is the first time they've conducted public outreach at this scale, signalling a fundamental shift toward a more active protective stance.   ► They also released the New Zealand Cyber Threat Report for 2025, and frankly, it makes for sobering reading. A few key findings explain exactly why the NCSC is ramping up their activity: → State-sponsored actors are now actively targeting New Zealand organisations → Cybercriminals have access to increasingly sophisticated tools → Supply chains have become prime attack vectors → Unpatched vulnerabilities continue to provide easy entry points   ► And there's more - they just published new guidance on Secure Integration of #AI in #OperationalTechnology, recognising how rapidly our threat surface is expanding with emerging technologies.   For business leaders, this should be a clear signal. It reminds us that cybersecurity is a strategic business risk that demands board-level attention and investment as the threat environment has escalated to the point where government agencies are moving from reactive to proactive mode.   Examine these in detail (and more) at the National Cyber Security Summit this March 17-18 in Wellington: https://lnkd.in/gWqqzF7h #cyber #cybersecurity #cybersummit2026 #wellingtonnz Brightstar

16

2 Comments

URGENT: Australian Cyber Threat Landscape Update - 15 January 2026 The last 24 hours have marked a significant surge in cyber activity across Australia. Our latest analysis flags critical alerts for SaaS providers, government agencies, and the FinTech sector, driven by active exploitation of widely used infrastructure. Key highlights from today's intelligence report: - Critical n8n RCE (CVE-2026-21858): A severe, unauthenticated vulnerability in the n8n automation platform is currently being exploited, granting attackers potential "keys to the kingdom" for connected cloud services. - Microsoft Hyper-V Zero-Days: Following January's Patch Tuesday, we are seeing active exploitation of privilege escalation flaws allowing sandbox escapes in virtualized environments. - Prosura Data Breach: A confirmed incident involving the Australian insurer highlights a growing trend of "island hopping," where compromised infrastructure is used to launch phishing campaigns against customers. - AI Security Risks: A new code injection vulnerability in Open WebUI is threatening the integrity of self-hosted AI models in the Education and EdTech sectors. Immediate patching of n8n instances and Hyper-V environments is strongly recommended. For the detailed executive summary, technical specifics on these CVEs, and mitigation strategies, please read the full article on our website. https://lnkd.in/gFGCuceR #CyberSecurity #ThreatIntelligence #Australia #InfoSec #CloudSecurity

1

The Cyber Threat Landscape for Australian SMBs: Insights from ASD’s 2024–25 Report The latest ASD Annual Cyber Threat Report paints a clear picture that the cyber threat landscape for Australian businesses is escalating. - 1 cybercrime report every 6 minutes. - Average cost per business incident up 50% to $80,850. For small businesses, that’s now $56,600 per incident (a 14% rise), and $97,200 for medium businesses (up 55%). What are the most common attacks? -Business email compromise (BEC) -Identity fraud -Email compromise attempts without financial loss These aren’t isolated events; they’re now everyday risks. The ACSC responded to over 1,200 incidents last year, an 11% increase, with ransomware and data theft continuing to disrupt operations across Australia. What’s more, the lines between state-sponsored and criminal activity are blurring. Small and medium enterprises, often part of larger supply chain,s are becoming prime entry points for attackers. 🔐 What SMBs Should Do ASD’s key actions for businesses are simple but critical: -Implement best-practice logging and monitoring. -Retire legacy tech or isolate it properly. -Choose products that are secure by design. -Start planning for post-quantum cryptography, the next frontier in security. Cyber resilience isn’t optional anymore. It’s a business survival skill. At Secure Link Solutions, we help SMBs take a practical, affordable approach to protecting their networks before incidents become headlines. Stay Connected! Stay Secure! Links: https://lnkd.in/gSKkHJG2 https://lnkd.in/gCVf9fSq #CyberSecurity #ASD #SMB #Australia #CyberResilience #DataProtection #SecureLinkSolutions

1