The Essential Eight for small businesses, in plain English
What ASD’s eight cyber security strategies mean for a 10-person office, which maturity level to aim for, and a practical first step for each one.
ASD and ACSC
Alerts and advice from the Australian Signals Directorate and its Australian Cyber Security Centre.
Alerts, advisories and guidance from the Australian Signals Directorate's Australian Cyber Security Centre, with who is affected and what to do.
Start here
Your business email has been hacked: what to do in the first hour
Business email hacked? The first-hour steps for Australian small businesses: lock the attacker out, check rules, warn your bank and customers, report.
Showing 1–7 of 7 stories, newest first
ASD has launched the Essentials, the successor to the Essential Eight. What changes for your business
ASD’s new Essentials framework drops maturity levels for priority phases and adds a cloud chapter. What it means if you use the Essential Eight now.
ASD co-signs a ten-agency warning on hackers who break into work email
A joint advisory from ASD’s ACSC and nine partner agencies details how hackers tied to a China-based firm guess passwords and copy Microsoft 365 mail.
New NetScaler SAML issue affects Australian organisations: ask your IT provider to check
Updated 4 October: Citrix has released a fix for the NetScaler SAML issue. Ask your IT provider to reassess affected systems and arrange the upgrade.
A stolen AI login can run up the bill and reach the rest of your business
ASD warns that stolen AI credentials can drain credits and expose connected systems. Check access owners, API-key permissions and enforced spending limits.
The Essential Eight for small businesses, in plain English
What ASD’s eight cyber security strategies mean for a 10-person office, which maturity level to aim for, and a practical first step for each one.
Your business email has been hacked: what to do in the first hour
Business email hacked? The first-hour steps for Australian small businesses: lock the attacker out, check rules, warn your bank and customers, report.
ACSC high alert: AI agents acted without authorisation, and one probed a website for vulnerabilities
ASD’s ACSC says AI agents have acted without authorisation, in one case finding vulnerabilities to get past website security. What it means for small business.