Skip to content

Advisory: PHP2Shell: the critical PHP vulnerability and how to patch itRead more

Sector

Small business security

Security for small business: practical controls, SMB1001, the Essential Eight and scams.

25 Oct 2026Company news
Introducing Jetstone, AI cyber defence software for Australian businesses
Covers to 23 Oct 2026Threat intelligence
Exploited in October 2026: Ivanti, Windows, PAN-OS, Cisco and Ahsay lead 26 additions
Critical severity
22 Oct 2026Advisories
PHP2Shell: the critical PHP vulnerability and how to patch it
ASD release 15 Oct 2026Policy and regulation
ASD launches ASD Essentials, the successor to the Essential Eight
Critical severity
KEV release 14 Oct 2026Advisories
CISA lists exploited flaws in PAN-OS, Cisco Secure Email Gateway and AhsayCBS
High severity
Patch Tuesday 13 Oct 2026Advisories
Microsoft October 2026 Patch Tuesday: exploited Windows Shell flaw and two public zero-days

Guides
ISO 27001 readiness: the gap assessment, the Statement of Applicability and the first audit
Covers to 30 Sep 2026Threat intelligence
Exploited in August and September 2026: 74 flaws added, from SharePoint to RouterOS
Assessed 24 Sep 2026Company news
Black Shard’s own estate assessed at Essential Eight Maturity Level 3 across all eight strategies
ASD release 19 Sep 2026Research
ASD on agentic AI in cyber defence: start with low-risk tasks and keep a human on approvals
Issued 15 Sep 2026Company news
Black Shard insurance cover meets Local Buy LB308 supplier levels
Guides
How to build an inventory of internet-facing assets
Guides
Penetration testing cost in Australia, and how to get a quote
Guides
What a vCISO retainer costs in Australia
Guides
What Australian cyber insurers check before they quote you
Guides
How to answer a vendor security questionnaire without stalling the deal
Guides
The Australian cyber compliance map: what applies to your business
Guides
What an Essential Eight self-assessment takes
Guides
SMB1001 or Essential Eight: which should you do first?
Guides
Alerts worth waking up for: detection without a SOC
Guides
Backups that survive ransomware as well as disk failure
Guides
Zero trust for a fifty-person company: where to start
Guides
Hardening Microsoft 365 on the licences you already have
Compliance phase from 1 Jan 2026Policy and regulation
Ransomware payment reporting: the 72-hour rule is in its compliance phase

All categories

Advisories
Patch and mitigation notices, each with a severity, its identifiers and one action.
Latest 25 Oct 2026
Threat intelligence
Incidents, campaigns and the monthly exploited-vulnerability roundups.
Latest 25 Oct 2026
Research
Data briefs and analysis drawn from primary statistics.
Latest 25 Oct 2026
Policy and regulation
ASD, Home Affairs, the OAIC, the Privacy Act and the Cyber Security Act.
Latest 25 Oct 2026
Company news
Products, arrangements, certificates and client releases from Black Shard.
Latest 25 Oct 2026
Guides
Reference guides and technical write-ups from our own engagements.
Latest 6 Oct 2026

Want this applied to your systems?

Tell us what you run and what you need checked.

Talk to us Call 1800 370 270