

David Braue
Editor at Large
David Braue is an award-winning technology journalist who covers the security and telecommunications industry in Australia. Follow him on Twitter at @zyzzyvamedia.


ANZ businesses hungry for IoT, unprepared for its risks
Explosion of device vulnerabilities leaves Australian, New Zealander companies victim to their own digital transformation efforts.

Scammers’ Australian windfall bodes poorly for cybersecurity’s human defences
Company culture is the soft underbelly that scammers can exploit, using the same techniques to access corporate data which fool employees in their personal lives.

Low board engagement, possible ransom bans increase Australian businesses’ cybersecurity risks
If Australia bans insurers from paying ransoms, cybersecurity-ignorant boards will be in for a shock.

NSW Education’s current hack exposes the cybersecurity lessons not learned
Details of Australia attack are sparse but timing suggests opportunistic cybercriminals targeted agencies struggling to meet security requirements.

As Australia counts cost of Kaseya attack, should industry be doing more?
Supply-chain commonalities mean industry verticals should formalise their security collaboration, such as by adopting the US’s ISAC model.

Australian authorities among world’s biggest requesters of personal data
Big Tech is sharing personal info as authorities run roughshod over privacy protections.

Australia will finally mandate Essential Eight security compliance
After a spate of cyberattacks and more than three years after a parliamentary review called a mandate “critical”, the federal government is preparing to act.

Australia moving closer to mandatory ransomware disclosure
The JBS ransomware attack on critical infrastructure highlights ‘perilous’ risk to key industries, and government action including but not limited to disclosure mandates are under consideration.

As pandemic hit, MFA protected University of Newcastle’s digital transformation
Several Australian universities have reworked their cybersecurity and access control approaches in response to the rising number of attacks in education.

Australian small businesses under cyberattack: Some help is coming
Small businesses form a large part of the economy, but individually struggle with the skills and tools to fend off a growing surge of cybersecurity risks.

Australian CISO salaries surge on growing cybersecurity demand
CISOs hired at record pace amidst COVID-era spike in security controls.

Ransomware has put Australia’s hospital cybersecurity on life support
Just as one Australian hospital recovers, another is breached—an all too common story lately.

Four years after NotPetya, cyber insurance is still catching up
Experts advise “terrified” insurers to better engage businesses to ensure long-term viability, and they advise businesses to track their policies closely.

Nation-state cyberattacks go on despite treaties. Is public blame an answer?
As nation-state actors target “off-limits” healthcare organisations, Australia’s cyber ambassador wants international peers and companies together to “squeeze their operating space” by bolstering defences and naming the attackers.

The latest cyberattacks, including on Nine Network, once again show how unprepared Australia is
4 major cybersecurity breaches underscore that despite much money and talk, Australian organisations remain fairly easy targets for cybercriminals.

How Australian companies can defend against ransomware
The “devastating” ransomware surge draws interest, calls for action at the highest levels of government.

With Australian cybersecurity standards in their ‘infancy’, industry seeks clarity
There are more cybersecurity standards and resilience frameworks than people to implement them, pointing to a need for harmonisation and aggregation.

Accellion file-sharing breach claims more Australian victims
Regulators, key agencies counting the cost as cybercriminals flaunt stolen data.

Australia’s COVID vaccinations a shot in the arm for cybercrime
Amidst ongoing scam success, CISOs must double down on user training to combat the growing threat of “undertrained” users.