Netcrook
Oceania
Australia’s CISC Pushes SOCI Reforms Into the AI Era
A consultation on 21 proposed changes points to a narrower compliance debate with a wider goal: keeping critical infrastructure rules relevant as AI changes how cyber risk is measured.
Australia’s Website Layer Is Under Pressure as CMS Exploits Go Industrial
A national alert about a large-scale CMS exploitation campaign points to a familiar but stubborn problem: internet-facing websites are only as safe as their weakest patch, plugin, or admin control.
Auto-Healing the Airwaves: Optus Tests a Faster Way Back Online
A live trial of automated Cell Coverage Compensation shows how mobile recovery is moving toward machine speed, while the reliability of the control logic becomes the real issue.
Australia-Wide Mobile Blackout Exposes the Hidden Fragility of Connectivity
A major outage on a national mobile network disrupted voice and data services across Australia, showing how quickly telecom reliability becomes a business continuity problem.
Stolen Credentials Put Australia’s Critical-Infrastructure Defenses on the Clock
A reported intrusion into a network used by a critical-infrastructure operator shows how ordinary login details can become strategic access in the wrong hands.
Australia’s Cyber Risk Is Easing, but SMBs Are Now Carrying More of the Load
Improved institutional safeguards and tighter rules can lower national exposure, but the day-to-day burden of staying safe is shifting further onto smaller businesses.
When a Leak-Style Ransom Note Becomes the First Signal
A Qilin claim tied to a Sydney-area golf club shows how extortion posts can create urgency long before any breach is publicly verified.
Qilin’s Name-and-Shame Post, and the Thin Line Between a Claim and a Breach
A newly surfaced victim listing naming Pennant Hills Golf Club shows how ransomware operators turn public exposure into pressure, even when the underlying compromise has not been independently established.
Quantum-Safe Security Moves From Theory to Migration Planning
An interview with ExeQuantum founder Sam Tseitkin puts the spotlight on a practical problem: how organisations can prepare their cryptography before quantum risk becomes operational.
Australia Pushes Back on Fake Sender Names as SMS Scams Get a New Barrier
ACMA’s SMS Sender ID Register is now live, adding a formal layer of identity checking to one of the most abused channels in mobile fraud.
Winter Scam Spike in Australia Exposes the Power of Social Trust
New data tied to Gen shows Australian financial scam attempts more than doubled in winter over the past two years, a reminder that fraud often scales by exploiting timing, familiarity, and pressure rather than technical complexity.
Nova’s Claim Lands on a Public-Safety Label in New South Wales
A ransomware-posted allegation naming an NSW government RFS unit highlights how extortion crews use public claim pages to amplify pressure before any breach is verified.
Leak-Site Claim Turns a Citrix Trail Into a Ransomware Warning
An unverified Nova victim post tied to NSW fire services shows how shared folders, remote access, and extortion pressure can converge in a single incident claim.
Leak-Site Claim Puts NSW Rural Fire Service Name Inside Nova’s Extortion Orbit
A ransomware listing attached the public-safety brand to an unverified attack claim, but the technical meaning is narrower than the headline suggests.
Leak-Site Noise Hits a Fire Agency, but the Real Story Is the Extortion Playbook
A post naming the NSW Rural Fire Service illustrates how ransomware crews use leak-site pressure, affiliate branding, and vague “data leaked” claims to force urgency before proof is established.
ACMA’s New Compliance Map Puts Consumer Harm in the Spotlight
Australia’s communications regulator has drawn up its 2026-27 enforcement priorities, and the real signal is where it says consumer harm is most likely to matter.
Stored XSS in Webmin Notification Templates Could Put Root Sessions at Risk
A flaw in Webmin’s System and Server Status module shows how a seemingly minor template field can become a dangerous trust-boundary break in a privileged admin console.
Australia Starts Phasing Out a Familiar Cyber Baseline
The planned retirement of the Essential Eight points to a policy reset, with consultations underway on what should replace it.
New Zealand’s Cloud Race Is Really a Test of Control, Not Speed
As AI pushes cloud estates beyond simple migration, the real security problem is whether organizations can keep residency, cost, identity, and operations under discipline.
A Quiet CEO Switch With a Loud Governance Message
The Australian Computer Society has installed Dr Prins Ralston as chief executive officer immediately, and the only confirmed cybersecurity lesson is a familiar one: leadership changes matter most when they shape how seriously an organization treats governance.