Threat briefs for Australian small businesses.
Short, plain-English briefs on cyber threats that matter to a business without a security team: what happened, who is affected and what to do. Each one is written in our own words from public sources such as ASD's ACSC, CISA and the OAIC, and links to them.
Latest briefs
Install November Microsoft updates now: Outlook flaw under active attack
Published
Microsoft's November 2026 update batch includes an Outlook flaw that attackers are already exploiting, so Windows, Outlook and Exchange machines should be updated first.
Patch Zyxel GS1900 switches: unauthenticated flaw under reported attack
Published
Zyxel has published fixed firmware for an unauthenticated flaw in ten GS1900 switch models, which researchers say has been used against nearly 1,000 devices.
Update Plex on QNAP NAS now: Plex2Shell flaws are being exploited
Published
QNAP warns that Plex Media Server on some of its NAS devices has been compromised through the Plex2Shell flaws; update Plex, stop exposing it to the internet and check exposed boxes for compromise.
Follow new briefs with the Atom feed. Briefs are general information, not advice for any particular organisation. For longer pieces, see the blog.
Want to know where your business stands?
The free security check is a passive look at what your business already exposes to the internet, read from public records only, with a one-page result in plain English.