Agentic AI: The New Workforce — And the Identity Gap Businesses Must Address
Artificial intelligence is accelerating into a new phase. Beyond chatbots and automation, organisations are introducing agentic AI — autonomous systems capable of taking action, accessing data, and interacting with business systems much like human employees. This shift brings significant efficiency, but also a major security concern:Most AI agents currently operate with no formal identity, lifecycle management, or […]
Two Recent Incidents, One Clear Message: Cyber Resilience Matters
Recent reports from the United States highlight two very different cyber incidents — one affecting a major healthcare provider, the other involving a global financial platform. While the industries differ, the underlying lesson is the same: cyber risk is no longer theoretical. It directly impacts operations, customers, and trust. At CSB, we believe these cases […]
Malvertising Campaign Targets Mac Users Through Hijacked Google Ads Accounts
We recently reviewed research from Bitdefender highlighting an active malvertising campaign targeting macOS users. The findings show how attackers are increasingly abusing legitimate advertising platforms to distribute malware — without exploiting any software vulnerability. Instead, they are exploiting trust. According to Bitdefender, threat actors hijacked legitimate Google Ads accounts to deliver malicious sponsored results to […]
Strengthening Superannuation Security: Why Phishing-Resistant Authentication Can No Longer Wait
We recently reviewed an article from SecurityBrief covering the 2025 superannuation cyber incidents, along with updates relating to APRA’s CPS 230 operational risk standard. We believe this is an important topic for our audience, particularly as it highlights how credential theft continues to put Australians’ retirement savings at risk. With cyber threats evolving and regulatory […]
Android Malware “PromptSpy” Uses Generative AI to Stay Hidden on Devices
We recently reviewed new research from ESET, which has identified an Android malware family dubbed PromptSpy. According to ESET researcher Lukáš Štefanko, this appears to be the first observed Android malware sample using generative AI to maintain persistence on infected devices. The discovery is notable not because AI is controlling the entire attack, but because […]
Healthcare Leads OT Targeting in Australia
We recently reviewed new research from Nozomi Networks Labs examining operational technology (OT) and internet-connected environments across 2025. The findings are particularly relevant for Australian organisations operating critical systems — especially in healthcare and manufacturing. According to the report, healthcare services was the most targeted industry in Australia for OT and connected environments in 2025, […]
Okta SSO Vishing Campaign Linked to ShinyHunters: What Organisations Should Understand
We recently came across reporting from SecurityWeek about a large-scale cybercrime campaign linked to the ShinyHunters group. Given the number of well-known organisations mentioned and the techniques involved, we believe this is an important development to share — particularly for businesses relying on single sign-on (SSO) and multi-factor authentication (MFA) platforms. According to security firm […]
Hundreds of Chrome Extensions Found Leaking Data — Why This Matters for Your Organisation
We recently came across an article published by SecurityWeek discussing new research into malicious Chrome extensions. It immediately caught our attention — not because browser extensions are new, but because of the scale involved. More than 300 Chrome extensions were found leaking browser data, spying on users, or outright stealing sensitive information. Given how widely […]
Part 2: Securing ICS for the Future — From Resilience to Continuous Validation
If replacing aging industrial systems is unrealistic in the short term, how should organisations respond? The answer emerging across experts is clear: resilience must become operational, continuous, and identity-driven. Trevor Dearing of Illumio suggests going beyond resilience toward “anti-fragility” — systems that improve after stress rather than merely surviving it. Identity as the Core Control […]
Part 1: Industrial Control Systems in 2026 — Built for Reliability, Targeted for Disruption
Industrial Control Systems (ICS) power the infrastructure we depend on every day — electricity, water, transport, manufacturing, and increasingly, smart cities. Many of these systems were engineered for safety and uptime long before cybersecurity became a primary design consideration. They were built to operate reliably for decades. And they have. The challenge is that today’s […]