Blog

Vulnerability management as we know it has about 18 months left

26.10.26 06:00 - By Shaun Barnett
AI can now turn a software fix into a working attack in hours. What Anthropic's deputy security chief and the cyber insurers told CyberCon 2026, what PHP2Shell showed a week later, and the three decisions a small business should make this month.

Can a scammer fake a phone number? The number on your screen is not evidence.

25.10.26 11:19 - By Shaun Barnett
Can a scammer fake a phone number? The number on your screen is not evidence.
Yes, easily, and your phone cannot tell. What it does label for you, what it never will, and what to do when a call says it is the police or your bank.

AISA CyberCon 2026: what five CyberCons taught me. It was in the seat pocket the whole time.

18.10.26 19:33 - By Shaun Barnett
AISA CyberCon 2026: what five CyberCons taught me. It was in the seat pocket the whole time.
Five CyberCons in, one in four talks had AI in the title, and the best idea of the week was in my seat pocket. On bias, devil's advocates, and why the experts can't agree about AI.

What to do if your medical records are in a data breach. Nobody chose the fax company.

16.10.26 18:36 - By Shaun Barnett
What to do if your medical records are in a data breach. Nobody chose the fax company.
A leaked medical file has almost no reset button. Here is the exception nearly nobody knows about, and what to do when your health data is in a breach.

ASD Essentials is here. Here is why your small business should do nothing.

15.10.26 13:02 - By Shaun Barnett
ASD Essentials is here. Here is why your small business should do nothing.
ASD published Essentials, the successor to the Essential Eight, on 15 October 2026. It is written for government and large organisations, nobody can certify you against it, and our advice to small business is to do nothing about it for now. Keep going with SMB1001, and here is why.