Skip to content

Advisory: PHP2Shell: the critical PHP vulnerability and how to patch itRead more

Topic

Identity

Identity attacks and controls: MFA bypass, token theft, conditional access, guest access and offboarding in Entra ID.

25 Oct 2026Company news
Introducing Jetstone, AI cyber defence software for Australian businesses
Released 23 Oct 2026Company news
GRM LAW release: a new public site and a hardened Microsoft 365 tenant
High severity
KEV listed 13 Oct 2026Advisories
Ivanti Connect Secure zero-day CVE-2026-104935 exploited in a three-flaw chain
Guides
Entra ID privileged access: PIM, admin roles and break-glass accounts
Guides
What a Microsoft 365 security review checks, setting by setting
ASD release 19 Sep 2026Research
ASD on agentic AI in cyber defence: start with low-risk tasks and keep a human on approvals

Guides
Least privilege for AI agents with tool access
Informational severity
Guidance updated 14 Sep 2026Advisories
ASD and partners update their Active Directory compromise guidance to 18 techniques
Guides
What Australian cyber insurers check before they quote you
Guides
RBAC vs ABAC, and where the permission check belongs
Guides
What to check in an Entra ID app registration security review
Guides
Shadow IT and the SaaS you cannot see
Guides
AI coding agent security starts with what it can already reach
Guides
Microsoft Entra conditional access that holds
Guides
Zero trust for a fifty-person company: where to start
Guides
Password spraying still works
Guides
Offboarding: the access that outlives the employee
Guides
What a guest account can see in your Microsoft 365 tenant
Guides
Hardening Microsoft 365 on the licences you already have
Guides
How attackers move laterally in a Windows network
Guides
What an enterprise buyer means when the contract says SAML single sign-on
Guides
What to measure in a phishing simulation
Guides
Token theft: when attackers skip the password entirely
Guides
The anatomy of a business email compromise
Guides
Why MFA still gets bypassed, and what stops it

All categories

Advisories
Patch and mitigation notices, each with a severity, its identifiers and one action.
Latest 25 Oct 2026
Threat intelligence
Incidents, campaigns and the monthly exploited-vulnerability roundups.
Latest 25 Oct 2026
Research
Data briefs and analysis drawn from primary statistics.
Latest 25 Oct 2026
Policy and regulation
ASD, Home Affairs, the OAIC, the Privacy Act and the Cyber Security Act.
Latest 25 Oct 2026
Company news
Products, arrangements, certificates and client releases from Black Shard.
Latest 25 Oct 2026
Guides
Reference guides and technical write-ups from our own engagements.
Latest 6 Oct 2026

Want this applied to your systems?

Tell us what you run and what you need checked.

Talk to us Call 1800 370 270