Cyber

Following public reporting regarding a selective, state-sponsored compromise of the Notepad++ auto-updater component (WinGup), Orro Group conducted a targeted threat hunt to validate whether any impacted updater activity, known indicators of compromise (IoCs), or associated attacker tradecraft were present within the client environment.

Earlier this month, I had the opportunity to join a room full of operational technology (OT) security practitioners, engineers, and executives at the OT Cyber Resilience Summit in Melbourne. We were there alongside our partner Claroty — and next door to our colleagues at Fortinet, with whom we collaborate closely on OT security architecture and response. Over the course of a roundtable session, we covered ground that I think deserves a wider audience.

Executive‑level cybersecurity leadership — without the cost, delay or risk of a full‑time hire.

Prioritise exposures that genuinely threaten business‑critical assets rather than noise.

Future proof your technology landscape with a vendor-neutral blueprint and pragmatic roadmap.

Security teams are accustomed to working against a moving target. What has changed in recent years is not the nature of that target but its speed.

Most security programmes validate periodically. Threat actors operate continuously. That structural mismatch – not budget, not technology – is the central reason so many organisations discover they have been compromised long after the fact.

Most boards are not being shown what they need to govern cyber risk. They receive compliance status updates, patch completion rates, incident tallies, and tool deployment summaries – metrics that confirm activity is occurring, not that the organisation is actually becoming safer.

Security intelligence is only as good as the infrastructure that produces it.

Security operations teams have never had more data to work with. Threat detection tools are more capable, SIEM platforms correlate events at scale, and dashboards surface signals from every layer of the stack.

Australian organisations are spending more on cybersecurity than at any point in their history. Security stacks have grown larger, dashboards have multiplied, and threat intelligence feeds run continuously.

Endpoint Detection and Response (EDR) platforms have significantly raised the bar for attackers. Known malware, commodity tools, and noisy post exploitation activity are routinely detected and blocked. However, modern adversaries have adapted. This threat hunting engagement was designed to answer a critical leadership question:

Security teams have never had more vulnerability data. Scanners run continuously. Reports stack up. Backlogs grow. Yet breach rates haven’t meaningfully declined. Most vulnerability programs optimise for volume, not exposure. They measure how many vulnerabilities are identified or closed, rather than how long critical assets remain exposed to known attack vectors. A vulnerability discovered and catalogued does nothing to reduce risk. An exposure closed and verified as remediated does.

The security operations centre is under pressure. Alert volumes continue to rise, skilled analysts remain scarce, and executive interest in AI-driven automation is intensifying. The question facing CISOs isn’t whether to introduce automation—it’s whether they can do so without amplifying the very risks they’re meant to reduce. Most SOCs don’t have a tooling problem. They have a decision problem. The technology exists. The challenge is knowing which decisions are safe to delegate to machines, and which require human judgement under controlled conditions.

Multi-cloud has become the default answer to resilience questions. Spread workloads across AWS, Azure and on-premises infrastructure, and you’ve hedged against provider failure. Or so the thinking goes.

A clear, practical guide for C-suite leaders and risk managers on how to navigate the NDB scheme

An actionable cybersecurity guide for any Australian business.

Technical threats must be translated into financial risks that a Chief Financial Officer (CFO) can understand

Learn about Salt Typhoon, a state-sponsored Chinese threat actor, and how to protect your organisation from its advanced cyber-espionage tactics.

You’ve smartly invested in Cisco as the bedrock of your network infrastructure or in Splunk for top-tier Security Information and Event Management. It’s completely natural to have questions about how these two titans are coming together.

Retail has entered its next evolutionary phase: the convergence of digital and physical experiences.

Access our exclusive on-demand webinar, “Future-Proof Your K-12: Strategic Technology Planning,” designed specifically for K-12 leaders and technology teams. In this insightful session, we’ll equip you with the essential strategies to create dynamic, engaging, and future-ready learning environments.

Unlock the secrets of healthcare cybersecurity with insights from our distinguished guest, Jason Payne, Sales Director of ANZ at Claroty Healthcare.

Discover how AI is transforming the battlefield of cybersecurity with Glenn Maiden, Director of Threat Intelligence at Fortiguard Labs, ANZ, as our guide.

Discover the fascinating world of cybersecurity with our special guest, Glenn Maiden, Director of Threat Intelligence at FortiGuard Labs, ANZ.

Discover how digital forensics is revolutionising the fight against intellectual property theft and misconduct in the ever-evolving landscape of cybersecurity.

Discover the riveting journey of Darren Hopkins, a distinguished partner at McGrath McNichol, who transitioned from the Queensland Police Service to the forefront of digital forensics and cybersecurity.

IT is data-centric. OT is process-centric. Together, they can create an organisation that’s future-centric. Read on to learn how integrating IT and OT systems can unlock a whole new world of efficiency

Ever wondered what it takes to stay ahead in the fast-paced world of cybersecurity? Join us this week to learn what it takes.

By consolidating security services with a Managed Security Service Provider (MSSP), organisations can streamline operations, reduce costs, and enhance their overall cyber defence posture.

Ready to unlock the full potential of the digital future? Join us as we sit down with Nathan McGregor, Senior Vice President of APAC at Cradlepoint.

What if your small business could fend off sophisticated cyberattacks with the same prowess as a large corporation?

Embark on a thrilling expedition into the heart of cybersecurity as we sit down with Wayne Phillips, APJ Field CTO for SentinelOne.