Cybersecurity resources
Stay informed about the latest cybersecurity trends and threats affecting Australian businesses.
TeamPCP: Two WA Men Charged Over Global Open-Source Supply Chain Attack
Two West Australian men have been charged following an AFP, WA Police and FBI investigation into TeamPCP, the group behind a 2026 supply chain attack that compromised over 1,000 organisations worldwide.
No System Is Risk Free: Why Big Companies Keep Falling for the Same Phone Call
Scattered Spider and similar crews don't need malware or an exploit to breach a business — a convincing phone call to or from the help desk is often enough. Here's how the attack works and why detection matters more than prevention.
wp2shell: Inside the WordPress Core Pre-Auth RCE (CVE-2026-63030) and How to Respond
A technical breakdown of wp2shell (CVE-2026-63030), the unauthenticated remote code execution flaw in WordPress Core. How the REST batch API handler confusion works, how to detect it safely, and how to remediate it.
Your SOC Can't Keep Up. AI Assistants can help.
Security teams are drowning in alerts they don't have the capacity to investigate. AI-driven investigation doesn't replace analysts — it gives every alert the deep investigation that only a handful get today. Here's why the shift is inevitable and how to approach it.
AI Won't Kill Tech Jobs. It Will Define the Next Generation of Them.
Claude Code Security rattled cybersecurity stocks. Block cut 40% of its workforce citing AI. But the companies building these tools are hiring aggressively. The future isn't AI replacing humans — it's smaller teams of highly skilled professionals, augmented by AI, making decisions machines cannot make alone.
Open Source Is Broken by Design: How Trust Became the Biggest Vulnerability in Software
The XZ Utils backdoor, fake NuGet packages, and AI-hallucinated dependencies all exploit the same flaw — open source software relies on trust that attackers have learned to manufacture. The numbers are getting worse, and AI is accelerating the problem.
Why Every SMB Needs a SIEM: The Case for Security Logging and Detection
Most organisations have no visibility into what's happening on their systems. Learn why SIEM and security logging are essential for SMBs, what to look for in a solution, and how Eviant makes this possible for you.
Vibe Coding: The Invisible Threat Exposing Your Business Data
AI-assisted rapid development is bypassing security controls and exposing Australian businesses to data breaches. Learn how vibe coding creates unmanaged cloud deployments and what controls you need.
Cloud Memory Forensics: Acquiring and Analysing Volatile Evidence from AWS EC2 Instances
A practical guide to memory forensics in cloud environments. Covering acquisition techniques using AWS SSM, LiME, and AVML, and analysis with Volatility 3, MemProcFS, and Volexity Volcano for effective incident response.
DFIR Hunting Tools: THOR, Loki, Chainsaw: The Open-Source Arsenal That Finds What EDR Misses
A practical guide to the DFIR tools that incident responders actually rely on. Covering THOR APT Scanner, Loki, Chainsaw, Hayabusa, Velociraptor, and more, with real usage examples and guidance on when to reach for each tool.
TeamViewer: Your Essential IT Tool Is Attackers' Favorite Backdoor
Remote access tools like TeamViewer and AnyDesk are essential for IT support—but attackers abuse them for credential theft, persistence, and initial access. Learn how to protect your business.
Browser Extensions: The Hidden Security Risk Stealing Your Credentials
Browser extensions frequently become compromised through developer account hijacking, excessive data collection, and supply chain attacks. Learn how to monitor and protect your organization.
ASIC's $2.5M Penalty: Why Security Controls Are No Longer Optional for Australian Businesses
FIIG Securities fined $2.5 million by ASIC for cybersecurity failures. Learn what went wrong and why Australian businesses must prioritize security controls now.
Threat Hunting for Australian Businesses: Beyond Reactive Security
Threat hunting proactively searches for hidden threats in your environment before they cause damage. Learn why Australian businesses need proactive threat detection beyond traditional security tools.
ClickFix Attacks: The Social Engineering Trick Leading to Credential Theft
ClickFix attacks trick users into running malicious PowerShell commands disguised as legitimate error fixes, leading to infostealer infections and credential theft.
Essential 8 vs NIST CSF vs ISO 27001 - Which Should We Choose?
Australian SMBs face a choice between Essential 8, NIST Cybersecurity Framework, and ISO 27001 certification. Learn the costs, timelines, and which framework aligns with your business goals.
GraphQL Security: Preventing Data Exposure and IDOR
GraphQL APIs commonly expose schemas via introspection and allow unauthorized data access through IDOR. Learn how to test for these vulnerabilities and implement proper authorization controls.
Australian Privacy Act: Data Breach Notification Requirements
Australian businesses must notify the OAIC and affected individuals within 30 days if a data breach causes serious harm. Learn what triggers notification, assessment requirements, and disclosure obligations.
Information Security Policies: Why They Matter and How to Get Started
Information security policies define how your business protects data, manages risk, and responds to incidents. Learn why policies matter, what the essential ones are, and where to find templates.
Infostealer Malware: How Credential Theft Bypasses MFA and What to Do About It
Infostealer malware silently extracts browser passwords, session cookies, and MFA tokens from employee devices. Learn how infostealers work, why they bypass security controls, and detection strategies for Australian businesses.
Cyber Insurance Requirements in Australia: Security Controls Checklist
Australian cyber insurers increasingly require Essential 8 compliance and specific security controls before coverage. Learn what insurers expect, how to prepare for questionnaires, and cost factors.
AWS S3 Data Exfiltration: Detection Beyond CloudTrail Logs
CloudTrail logs API calls, but not actual data downloads. Learn how to detect S3 data exfiltration using Server Access Logging, VPC Flow Logs, GuardDuty, and cost-based anomaly detection.
PCI DSS 4.0 Changes: What Australian E-Commerce Businesses Need to Know
PCI DSS 4.0 introduces new security requirements for Australian e-commerce businesses. Learn what changed from version 3.2.1, implementation timelines, and how Australian acquirers are responding.
OpenClaw: Why You Should Avoid These AI Agents
OpenClaw and Moltbot AI agents promise productivity but introduce severe security risks. Learn why these tools threaten Australian SMBs and what to use instead.
Protecting AWS Cloud Snapshots: The Hidden Risk of Stolen Active Directory Credentials
How attackers exploit AWS EBS snapshots to steal Active Directory NTDS.dit password hashes without touching domain controllers. Learn detection strategies and defensive controls.
My Email Was Hacked: Phishing Response for Microsoft 365
Immediate response steps for phishing attacks that compromise Microsoft 365 and Google Workspace accounts. Covers MITM phishing that bypasses MFA, removing attacker persistence, and prevention.
AWS Lambda Backdoor Investigation: Compromised Credentials, EventBridge Persistence, and the Serverless Logging Gap
Technical analysis of an AWS cloud breach involving exposed credentials, Lambda function backdoors, EventBridge persistence mechanisms, and the unique challenges of incident response in serverless environments.
Inside the SolarWinds SUNBURST Backdoor: A Technical Breakdown of the Most Creative Malware Ever Built
A technical deep dive into how Russian intelligence hijacked SolarWinds' build pipeline, embedded a backdoor in a signed DLL, evaded every security tool on the market, and remained undetected for 14 months. Code-level analysis of the attack chain, from SUNSPOT to Golden SAML.
Essential 8 Compliance Guide for Australian Businesses: What You Need to Know
Eviant assesses your organisation against the Essential Eight through a structured, evidence-based maturity review with a transparent, fixed-price model. Engagements start at $5,000, delivering one of the lowest assessment price points in Australia.
No articles found matching your search.
Need help with your cybersecurity?
Our team provides practical, business-focused cybersecurity services for Australian organisations.