Microsoft Teams Helpdesk Impersonation Attacks Are Rising. Here’s What Australian IT Teams Should Change This Week

by CPI Staff | Apr 22, 2026 | Blog, Cybersecurity, Email Security, Essential 8, Microsoft 365 Security, Microsoft Teams

A new wave of social engineering attacks is targeting Australian organisations through a channel most IT teams still treat as safe: Microsoft Teams. Threat actors are impersonating internal IT helpdesk staff, reaching users via external Teams chats and federated...

The North Korean Threat Actor Now Targeting macOS Fleets — and Why Your Intune for Mac Baseline Matters

by CPI Staff | Apr 22, 2026 | Blog, Cybersecurity, Essential 8, Microsoft 365 Security, Microsoft defender XDR, Microsoft Intune

For years, Australian IT leaders treated macOS as the “quiet corner” of the fleet. A handful of executives and designers on MacBooks, a sprinkle of engineers, and a general assumption that Apple’s built-in protections were enough. That assumption no...

The Vercel Breach Shows Why Third-Party Hosting Belongs in Your Next Azure Well-Architected Review

by CPI Staff | Apr 22, 2026 | Azure, Azure Security, Blog, Cybersecurity, Software Supply Chain Security

In this blog post, The Vercel Breach Shows Why Third-Party Hosting Belongs in Your Next Azure Well-Architected Review, we look at why platforms like Vercel, Netlify, Cloudflare Pages, and Railway can no longer sit quietly outside the governance perimeter of an...

ACSC’s New Guidance on Frontier Models Puts AI Risk Squarely on the CISO Agenda for Australian Organisations

by CPI Staff | Apr 21, 2026 | AI, Blog, Cybersecurity

For many organisations, AI risk has been treated as a future governance issue. The Australian Cyber Security Centre has just made that position harder to defend. In its 9 April 2026 guidance, Frontier models and their impact on cyber security, ACSC draws a direct line...

Microsoft’s Emergency Windows Server Updates Are a Reminder Mid-Market Patch Validation Cannot Be Optional

by CPI Staff | Apr 21, 2026 | Blog, Cybersecurity, Essential 8, Windows Server

Patch deployment failures are not supposed to become operational incidents. But that is exactly what many IT teams were forced to confront after Microsoft’s April 2026 Windows Server security updates triggered installation failures on some Windows Server 2025...

Project Glasswing: What Anthropic’s $100M Cybersecurity Initiative Means for Enterprise Security Teams

by CPI Staff | Apr 15, 2026 | AI for Business & AI Strategy, AI Governance & Risk Management, Blog, Cybersecurity

On April 7, 2026, Anthropic announced Project Glasswing — a cybersecurity initiative that brings together AWS, Apple, Broadcom, Cisco, CrowdStrike, Google, JPMorganChase, the Linux Foundation, Microsoft, NVIDIA, and Palo Alto Networks. Their shared mission: use...