Grant Grant

Hackers don’t discriminate — are YOU their next target?” Think cyber-attacks are only for big corporations? Wrong. NDIS small businesses are increasingly in the crosshairs — and most don’t even know they’re exposed. One click. One weak password. That’s all it takes to lose trust, data, and clients. But here’s the good news: A practical, no-nonsense Cybersecurity Checklist has just dropped — designed specifically for NDIS, Regional SMEs, local government and end users. It’s FREE. It’s simple. And it could be the smartest move you make all year. Get the checklist here and lock the digital door before someone breaks in: https://lnkd.in/gdJTT5nr #NDIS #CyberSecurity #SmallBusinessSafety #SME #RiskManagement #ClientTrust #DataProtection #BusinessContinuity #ChecklistReady

1

URGENT: Australian Cyber Threat Landscape Update - 15 January 2026 The last 24 hours have marked a significant surge in cyber activity across Australia. Our latest analysis flags critical alerts for SaaS providers, government agencies, and the FinTech sector, driven by active exploitation of widely used infrastructure. Key highlights from today's intelligence report: - Critical n8n RCE (CVE-2026-21858): A severe, unauthenticated vulnerability in the n8n automation platform is currently being exploited, granting attackers potential "keys to the kingdom" for connected cloud services. - Microsoft Hyper-V Zero-Days: Following January's Patch Tuesday, we are seeing active exploitation of privilege escalation flaws allowing sandbox escapes in virtualized environments. - Prosura Data Breach: A confirmed incident involving the Australian insurer highlights a growing trend of "island hopping," where compromised infrastructure is used to launch phishing campaigns against customers. - AI Security Risks: A new code injection vulnerability in Open WebUI is threatening the integrity of self-hosted AI models in the Education and EdTech sectors. Immediate patching of n8n instances and Hyper-V environments is strongly recommended. For the detailed executive summary, technical specifics on these CVEs, and mitigation strategies, please read the full article on our website. https://lnkd.in/gFGCuceR #CyberSecurity #ThreatIntelligence #Australia #InfoSec #CloudSecurity

1

On Wednesday afternoon, Australia's cyber agency published a HIGH ALERT. It was the first alert it had published since 9 July. It says the attack is happening here. ASD's Australian Cyber Security Centre published it at 2:44pm on Wednesday 19 August. The alert level is High Alert, act quickly. Its own words, and they are worth reading slowly: "ASD's ACSC has observed the targeting of vulnerabilities affecting the N-able N-central product within Australia." N-central is a remote monitoring and management platform. It is what managed service providers and internal IT teams use to run other people's computers. Two authentication bypass flaws are involved, CVE-2026-18556 and CVE-2026-18577, both scored 8.2. Now the part that matters for how you read this: None of the technical facts are new. N-able began investigating anomalous activity on 31 July. An emergency hotfix landed on 2 August. CISA added the second flaw to its exploited catalogue on 3 August and the first on 4 August. Hotfix 2 arrived on 6 August. All of that is a fortnight old and none of it is this week's news. What changed on Wednesday is that an Australian government agency put its own name to the sentence that the targeting is occurring in Australia. That is a different class of statement from a vendor advisory, and it is the reason this is in front of you today rather than three weeks ago. ASD adds that it has "no information to indicate that a specific industry or sector is being targeted." Nobody has been named. No Australian victim has come forward. The useful question is not whether you are on a list. It is whether the fortnight between the patch and the alert was a fortnight you used. #Cybersecurity #ASD #ManagedServices #VulnerabilityManagement #ANZ For the full global debrief, reach out to our founder by responding to this post or DMing this account.

1

📣 As the recent ManageMyHealth incident and NCSC announcements show, New Zealand cannot afford to get complacent about cybersecurity...   ► The ransom hack on New Zealand's largest health portal is being billed as one of the country's biggest cybersecurity incidents - hackers threatening to release more than 400,000 documents stolen from about 126,000 Manage My Health patients if the private company fails to pay $60,000.   ► It's also been a massive period for the National Cyber Security Centre (NCSC). Recently, they took an unprecedented step - proactively reaching out to 26,000 New Zealanders to warn them their devices may be compromised by Lumma Stealer malware. This is the first time they've conducted public outreach at this scale, signalling a fundamental shift toward a more active protective stance.   ► They also released the New Zealand Cyber Threat Report for 2025, and frankly, it makes for sobering reading. A few key findings explain exactly why the NCSC is ramping up their activity: → State-sponsored actors are now actively targeting New Zealand organisations → Cybercriminals have access to increasingly sophisticated tools → Supply chains have become prime attack vectors → Unpatched vulnerabilities continue to provide easy entry points   ► And there's more - they just published new guidance on Secure Integration of #AI in #OperationalTechnology, recognising how rapidly our threat surface is expanding with emerging technologies.   For business leaders, this should be a clear signal. It reminds us that cybersecurity is a strategic business risk that demands board-level attention and investment as the threat environment has escalated to the point where government agencies are moving from reactive to proactive mode.   Examine these in detail (and more) at the National Cyber Security Summit this March 17-18 in Wellington: https://lnkd.in/gWqqzF7h #cyber #cybersecurity #cybersummit2026 #wellingtonnz Brightstar

16

2 Comments

Some key highlights from Australian Signals Directorate (ASD)'s Cyber Threat Report 2024–2025: 1. There is a significant rise in cyber incidents and reports: The Australian Cyber Security Centre (ACSC) reported that in during 2024-2025 they have responded to over 1,200 major cybersecurity incidents which is a 11% increase from the previous year. 2. There is a steep rise in the financial impact due to cybercrimes: For businesses, the average loss due to cybercrimes is on the rise, Small businesses lost up to $56,571 a 14% increase from last year, Medium business lost up to $97,166 a 55% increase, and Large businesses lost up to $202,691 a 221% increase. It was also reported that an individual average self reported loss was $36,633 3. Critical infrastructure under increasing threat: Critical infrastructures have received notifications of 190 potential malicious cyber activity impacting their network which is a 111$ increase from last year. The Top 3 most common types of activity which led to infrastructure related incidents were: Scanning or Reconnaissance making up 41% DoS/DDoS making up 31% Phishing making up 20% 4. Credential compromise, email attacks and phishing remain the main methods of attack: It was reported that email compromise with no direct financial loss accounted for ~19% of business reports, Business email compromise with financial loss ~15%, identity fraud ~ 11% and phishing emails remains one of the most common attack methods. 5. New technologies are amplifying the risk like AI The report also warns the rise in the use of Generative AI by cybercriminals as they use these tools to automate the analysis of extensive datasets which allows them to find vulnerabilities, they also use generative AI to create content like videos, text, fake voices, websites etc. to help them trick their target easier. 💡 The big moves organisations must take: a. Implement Effective event logging - You can't defend what you can't see b. Manage legacy IT risks - Legacy technology lets threats thrive c. Effective Third-Party Risk Management (TPRM) - Shut the back door, choose sercure and verifable technologies d. Start preparing for Post Quantum Cryptography (PQC) more details: https://lnkd.in/gCVf9fSq

7

Fortian's November 2025 cyber environment update is now available on the website! November saw steady activity across Australia’s cyber landscape, including new government sanctions on North Korea and Russia, emerging AI-enabled threats and several notable breaches affecting local organisations. Check out this month’s update written by SOC analyst Allan Grant on our website: https://lnkd.in/gnbwGb6Z

8