Employees play a critical role in protecting an organisation from cyber threats. Targeted cybersecurity training builds awareness and equips staff with the knowledge to recognise and respond to risks. The Australian Institute of Cyber Security (AICS) recommends that training programs for Australian businesses in 2025 include the following key topics. 1. Phishing and social engineering…

Cyber incidents can cause major disruption, financial loss, and reputational harm. Having a well-prepared incident response plan ensures that an organisation can respond quickly and effectively when an incident occurs. The Australian Institute of Cyber Security (AICS) recommends that all organisations maintain and regularly update an incident response plan covering the following key elements. 1.…

Australian businesses continue to face an evolving range of cyber threats. These threats not only cause financial loss but can also damage reputation, disrupt operations, and expose sensitive data. The Australian Institute of Cyber Security (AICS) has identified the key cyber threats most likely to impact organisations in 2025, along with recommendations for reducing risk.…

Digital evidence plays an increasing role in civil and criminal matters in Australia. Whether the case involves fraud, cybercrime, workplace disputes, or intellectual property, proper handling of digital evidence can determine whether it is admissible and persuasive in court. The Australian Institute of Cyber Security (AICS) has prepared these guidelines to help lawyers and clients…

Business Email Compromise (BEC) is one of the most common and costly cybercrime threats affecting Australian organisations. It involves scammers gaining access to, or impersonating, legitimate email accounts to trick businesses into transferring funds or sensitive data. Losses can be substantial and recovery can be difficult without immediate and correct action. The Australian Institute of…

According to a media release from the Australian Federal Police (AFP), a second syndicate member has been sentenced for defrauding almost a dozen people across NSW through a Spoofing scam. These spoofing scams involved a scammer pretending to be government officials including the AFP to coerce victims into providing their ID cards, Medicare cards, and…

The National Cyber Security Centre (NCSC), the UK’s cybersecurity agency has warned that Artificial intelligence will make it more difficult to spot whether emails are genuine or sent by scammers and malicious actors, including messages that ask computer users to reset their passwords. The types of scams mentioned, principally phishing messages (where users are tricked into…

Bank transfers were the most common way scam victims parted with their cash in 2022, the report said. The ABC reported that Australians lost a record $3.1 billion to scams in 2022, as the ACCC called for tougher measures. The ACCC said Australia should explore measures such as the United Kingdom’s Confirmation of Payee regulation,…

News from Europe shows that “The European Cybersecurity Scheme on Common Criteria (EUCC) drafted by the European Union Agency for Cybersecurity (ENISA) has been adopted as the first scheme within the EU cybersecurity certification framework.” This is a milestone for providing not only a regulatory environment but also a professional structure for ensuring a standard…

Cyber Expert and CEO of AICS, Simon Smith, discusses Facebook Marketplace Scams and how to deter scammers and protect yours and your loved ones from future attacks.