CyberCX

🤖 AI is redefining cyber security. It's enabling faster, smarter, and more sophisticated cyber threats, but also more powerful ways to defend our digital world.    The first of its kind Bachelor of Cyber AI (Industry Co-Lab), co-designed and delivered by CyberCX and Monash University, will build foundations in AI and cyber security and embed students in strategic partner organisations where they will engage in real projects, simulation activities, and scenario-based learning.    Students will learn from leading CyberCX experts who will share first-hand insights into how AI is impacting cyber security with guest lecturers, masterclasses, and the creation of an online Secure AI Lab learning environment for students to gain a practical, hands-on cyber AI experience as part of the degree.   Australia's resilient and AI-ready future depends on leaders who can harness AI and cyber security - experts who can secure our intelligent technologies, safeguard the data that powers our digital economy, and protect our services, infrastructure, and communities.    If you're seeking a career that tackles today's biggest emerging challenges, find more information and apply to enrol at https://lnkd.in/d2MfQEhU 🎓

CyberCX Tech and Telco Industry Lead Stuart Mort told The Australian Financial Review that the government has sent a clear signal that quantum computing capabilities that can break through modern encryption are no longer a far-off risk, and organisations should act now. “The timeline for post-quantum breakthroughs is unclear – but we should assume that when it arrives, it will arrive quickly,” Stuart said. “It’s better to undertake this work now before the risk is fully realised than to be caught flat-footed after a quantum breakthrough.”   “The risks for organisations can be as extreme as having essential connections to your customers cut overnight if you are not considered ‘safe’ in a post-quantum world,” Stuart continued, urging that organisations who depend on encryption should be assembling teams of experts and developing a plan to migrate systems that rely on encryption to post-quantum cryptography, following the Australian Signals Directorate's recommendations.

In our recent Secure AI webinar, Technical Director Brendan Wilkinolls explored why most artificial intelligence (AI) initiatives are failing before they start. Brendan says organisations that rush to approve, create and deploy AI systems and tools across their tech stack will often stall at the production decision due to lack of appropriate controls and governance in place.   "The technology, we know, is incredible, and yet by the time it gets pushed to production, it seems to not be doing what we intended it to do," said Brendan, highlighting that 80% of AI investments delivered no measurable business value in 2025. "We know AI will do the thing, but are you thinking beyond that and thinking about how you can actually use AI in a way that will succeed ultimately?"   In a post-webinar blog, Brendan shares how you can gain a better understanding of what a successful AI-enabled project or product looks like for your organisation, beyond the tool working as it should: https://lnkd.in/g4ZqK7-Z

🎯 How do you ensure the CISO in your organisation is best positioned to succeed?   Joining AISA #SydneySEC, Stuart Mort, CyberCX Executive Director Industry Lead, discussed 'what it means to have the CISO's six'. "CISOs sometimes fight harder against internal bureaucracy, severe lack of understanding about the importance of cyber maturity, politics and budget constraints as they do against threat actors," said Stuart.   He shared practical guidance on ways the CISO and their team can better perform their roles, including considerations for reviewing an organisation's cyber maturity against budget limitations.   Stuart said, "Organisations should be allocating a cyber budget aligned to the CISO’s risk register. This approach demonstrates to budget allocators the return on investment achieved through targeted risk buy-down, whilst the CISO has a ‘chain-of-responsibility’ that shows where decisions were made not to address the risk."   He added, "This approach helps answer the ‘how big should the cyber budget be’ question, whilst ensuring that cyber responsibility exists at the board level.” Australian Information Security Association (AISA)

Why are most artificial intelligence (AI) initiatives failing before they start?🔎   In our latest blog, CyberCX's Brendan Wilkinolls explains how data and AI teams are often being directed by executive leadership to fast-track AI initiatives. But when deployment outpaces governance readiness, organisations may be introducing unmanaged risk and exposing themselves to vulnerabilities.    Brendan says, "The reassurance that AI investments will create more value without introducing unmanaged risk is the gap that must be filled in order for AI initiatives to progress."   He adds, "Controlled AI use creates the conditions for a model to act reliably, predictably, and within authorised, monitored boundaries. This creates the trust required for organisations to scale AI initiatives and realise business value without exposing themselves to critical vulnerabilities."   ➡️ Read the full blog to better understand how to lower AI risk for your organisation: https://lnkd.in/g4ZqK7-Z

What's it like to be in the room when a cyber attack is unfolding? 🚨 Joining Tech Careers Hotline podcast, CyberCX's Shameela Gonzalez says while organisations are faced with huge amounts of ambiguity and a need to make rapid decisions, the primary focus is how to stop the bleeding and eradicate the threat actor as quickly as possible.    "You've got to think about the damage that could be caused if someone locked you out of your critical systems," Shameela told host, Adair Robins. "If there are people relying on really significant technology that needs to be on, what happens if a threat actor strips you of that access and you have no idea when you can get it back?" Shameela emphasised that organisations should prioritise crisis exercises and simulations to stress test how their procedures would work in the event of a cyber attack. "Having some kind of planning that you've tried to exercise and plan for in slow time becomes vitally important, so that you're actually able to have a stronger muscle memory to deal with that ambiguity."

📄 The latest Five Eyes statement warns that advances in AI are changing the cyber threat environment, and organisations must take practical actions to prepare and be ready before incidents occur.    In our latest blog, CyberCX's Evan Sorby says the Five Eyes warning is not about new threats alone: "Most cyber incidents still begin with familiar vulnerabilities, such as exposed services, weak credentials, legacy systems, or poor segmentation. These problems are not new, but the difference is attackers can now work through parts of the attack lifecycle faster than many organisations are set up to respond."   Evan adds that leaders may find themselves in situations where they must make fast decisions to secure their organisations without understanding the full technical picture of a cyber attack, meaning executives and boards could be making decisions in response to an incident with less information than ever before.   ➡️ Read the blog to discover what questions boards and executives should ask now to ensure their response plans are current, tested and ready: https://lnkd.in/dbATN9Wk

Boards are increasingly asking the CISO one question that is virtually impossible to answer: “are we safe in an AI-enabled world?” 🤖 Our latest edition of C-Suite Cyber explores why organisations that rush to approve, create and deploy AI systems and tools across their tech stack will often stall at the production decision due to lack of appropriate controls and governance in place.   The more control an organisation has over an AI initiative from a security perspective, the more autonomy it can exercise while maintaining trust, reducing risk exposure and lead to more opportunity and value.   ➡️ Read the full edition of C-Suite Cyber to better understand how to lower AI risk for your organisation: 

The end of financial year (EOFY) is one of the busiest periods on the finance calendar 📅 For finance teams, it's business as usual. For scammers, it's an opportunity, warns Shameela Gonzalez, CyberCX Executive Director, Financial Services Lead.   Shameela tells Eftsure that EOFY amplifies the exact conditions scammers rely on - factors like urgency and high volumes of transactions. "Any time where there's a really significant period and you're expecting a high volume for your business, just be on high alert that a criminal is going to know that and they're going to be planning ahead for that as well."   She adds it's also important to remember that some scams are tied to major events or seasons, but businesses should be on alert all year round. "Businesses should operate under the assumption that scam attempts are constant. When finance teams maintain this mindset, they can detect and mitigate threats more effectively." ➡️ Read more from Shameela on why EOFY creates the perfect conditions for scams, and what to watch for before 30 June: https://lnkd.in/gzQaHg8Y

In today’s interconnected business landscape, organisations rarely operate in isolation ⛓️ Supply chain attacks are one of the fastest growing threats in cyber security, and most organisations aren’t aware of their exposure until it’s too late.    In our latest blog, CyberCX Governance, Risk & Compliance Consultant Sophie Richter explains why this is the primary challenge of third party risk management (TPRM): "The risks organisations inherit from their suppliers, vendors and service providers are real, growing, and largely invisible without a coordinated and deliberate effort to surface them."   "From cloud providers to managed services, third parties can serve as a critical enabler for key business outcomes," Sophie continues. "But with this reliance comes exposure – third parties often bring their own third parties, creating an intricate web of exposure. The result is a supply chain that extends well beyond what most security teams can see, let alone manage."   ➡️ Read the blog to discover the gaps organisations consistently leave open and what effective TPRM actually looks like: https://lnkd.in/dsF9wAfG