Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Andy Curtis
The recovery gap. Wk20
CYBERSECURITY IT AND OT AI QUANTUM RESILIENCE What happens when the tools that watch, administer and restore the business become part of the incident Gadget Access Cyber, AI & Quantum Computing Week ending 18 October 2026 | Published 19 October 2026 Reporting window 12 to 18 October | Australia, United States and United Kingdom Conceptual illustration of shared management dependencies and an independent route to recovery. This week put a rather uncomfortable question in front of security leaders.
The recovery gap. Wk20
Australian Cyber Threat Brief: Hype, harm, hardening. Wk17 An OpenAI agent breached a Medicare statistics portal. A hijacked coding assistant seeded 100 repositories. Not every AI headline is the same incident. Hype, harm and the hardening that separates them.
Australian Cyber Threat Brief: The authority problem. Wk19
An attacker can borrow a trusted account. An agent can stretch a legitimate task. A quantum service can place exceptional power behind an ordinary interface. Who controls the authority between a request and its consequence?
Australian Cyber Threat Brief: The authority problem. Wk19
Week ending Saturday 11 October 2026 · Reporting window 5 to 11 October, sources checked 12 October Sydney time · Primary lens Australia first, AUKUS perspective An attacker can borrow a trusted account. An agent can stretch a legitimate task. A future quantum service can place exceptional power behind an ordinary interface. This week, the most useful question is who controls the authority between a request and its consequence.
Australian Cyber Threat Brief: The capability shock. Wk18
The AI has passed its benchmarks. The organisation is still looking for the person who owns the API key. The US$20.40 exploit, 543,699 unrevoked credentials and four breach scenarios for the next 90 days.
Australian Cyber Threat Brief: Hype, harm, hardening. Wk17
An OpenAI agent breached a Medicare statistics portal. A hijacked coding assistant seeded 100 repositories. Not every AI headline is the same incident. Hype, harm and the hardening that separates them.
The control test. Wk16
Week ending Friday 18 September 2026 · Coverage News and material disclosures from 14 to 18 September, sources checked 18 September AEST · Primary lens Australia first, AUKUS-wide This week, an attacker changed what website visitors received without changing the files at the origin. Brevo's delivery infrastructure became a malware distribution route. The important question was no longer simply, "Is our code clean?" It was, "Who can change what reaches the customer?" That question travels.
Australian Cyber Threat Brief: The control test. Wk16
An AI assistant booked outside its window and couldn't undo it. Taiwan reported AI-agent-assisted attacks. The White House authorised private cyber effects operations. Cl0p claimed 50 victims through one PLM platform. The pattern is identical: legitimate authority, used at machine speed, with the boundary assumed rather than enforced.
Australian Cyber Threat Brief: The speed trap. Wk15
An AI assistant booked outside its window and couldn't undo it. Taiwan reported AI-agent-assisted attacks. The White House authorised private cyber effects operations. Cl0p claimed 50 victims through one PLM platform. The pattern is identical: legitimate authority, used at machine speed, with the boundary assumed rather than enforced.
The Future Entered the Runbook
What I’ve Learned About Raising Capital….So Far CiBRAI founder and CEO Andrew Curtis shares what he's learned raising capital so far: why the same pitch lands differently in the US, UK, Europe and Australia, why capital needs a job description, and why the right travelling companions make the road shorter.
THE SYSTEMS HAVE STARTED IMPROVISING
Rogue agents, software-supply-chain crime, quantum finance and the week cyber stopped being a human-only sport WEEK ENDING Friday 28 August 2026 READING TIME 7-minute CISO / CIO briefing PRIMARY LENS Australia first, AUKUS-wide THE BIG SIGNAL The tidy categories broke this week. AI agents moved from assistant to operator, from operator to intruder and from software into physical devices. Australian police alleged a local link to a global software-supply-chain campaign.
THE SYSTEMS HAVE STARTED IMPROVISING
What I’ve Learned About Raising Capital….So Far CiBRAI founder and CEO Andrew Curtis shares what he's learned raising capital so far: why the same pitch lands differently in the US, UK, Europe and Australia, why capital needs a job description, and why the right travelling companions make the road shorter.
01 | THE FUTURE ENTERED THE CONTROL ROOM
GADGET CYBER NEWS WEEKLY AI-written industrial exploits, sovereign intelligence and the quantum migration clock WEEK ENDING FRIDAY 21 AUGUST 2026 8-MINUTE CISO BRIEFING THE BIG SIGNAL Artificial intelligence is no longer merely accelerating attacks against digital systems. U.S. agencies now describe AI-generated exploitation scripts being developed against industrial controllers.
THE FUTURE ENTERED THE CONTROL ROOM
What I’ve Learned About Raising Capital….So Far CiBRAI founder and CEO Andrew Curtis shares what he's learned raising capital so far: why the same pitch lands differently in the US, UK, Europe and Australia, why capital needs a job description, and why the right travelling companions make the road shorter.
THE WEEK TRUST BECAME EXECUTABLE
What I’ve Learned About Raising Capital….So Far CiBRAI founder and CEO Andrew Curtis shares what he's learned raising capital so far: why the same pitch lands differently in the US, UK, Europe and Australia, why capital needs a job description, and why the right travelling companions make the road shorter.
What I’ve Learned About Raising Capital….So Far
BY ANDREW CURTIS | Founder and CEO, CiBRAI FOUNDER’S NOTE | 5 MIN READ | AUGUST 2026 The long road to the first cheque, and why the right travelling companions matter. There is a moment in every capital raise when the pitch deck stops being a file and becomes a member of the team. It develops versions, moods and an unexplained ability to reappear at 11:47 pm with one more change. At CiBRAI, ours has been called final, final-2, final-revised and final-really-final.
What I’ve Learned About Raising Capital….So Far
What I’ve Learned About Raising Capital….So Far CiBRAI founder and CEO Andrew Curtis shares what he's learned raising capital so far: why the same pitch lands differently in the US, UK, Europe and Australia, why capital needs a job description, and why the right travelling companions make the road shorter.
Australian Cyber Threat Brief: Who owns the yes? Wk9
Critical Infrastructure: Control, Continuity and FOCI In geopolitics, control is a cyber objective. KDDI at 12 million users, Australian CI notifications up 111 percent, and why the target is often authority, not data.
Australian Cyber Threat Brief: Who owns the yes? Wk9
GADGET CYBER NEWS WEEKLY WHO OWNS THE YES? The CISO decision surface | Week ending 31 July 2026 THE EXECUTIVE SIGNAL: This week was not merely about stolen records. It was about who could approve access, reset identity, route a service, administer a control or convince someone that an instruction was legitimate. The systems which say yes are becoming the real crown jewels. Need independent vCISO leadership?
The Week the Controls Blinked
GADGET CYBER NEWS WEEKLY Australian Cyber Threat Brief: Control plane security. Wk8 AI agents, customer data, dairy production, email intelligence and a small municipal library of patches. WEEK ENDING 24 JULY 2026 THE WEEK IN ONE SENTENCE Control is now the target: control of an AI agent’s tool path, a utility customer’s context, a dairy plant’s production systems, a government inbox and the consoles that define enterprise security policy. Taken separately, this week’s stories look unrelated.
The Week the Controls Blinked
Critical Infrastructure: Control, Continuity and FOCI In geopolitics, control is a cyber objective. KDDI at 12 million users, Australian CI notifications up 111 percent, and why the target is often authority, not data.
Australian Cyber Threat Brief: Control is a cyber objective. Wk6
Critical Infrastructure: Control, Continuity and FOCI In geopolitics, control is a cyber objective. KDDI at 12 million users, Australian CI notifications up 111 percent, and why the target is often authority, not data.
Critical Infrastructure: Control, Continuity and FOCI
Critical Infrastructure: Control, Continuity and FOCI In geopolitics, control is a cyber objective. KDDI at 12 million users, Australian CI notifications up 111 percent, and why the target is often authority, not data.
Critical Infrastructure: Control, Continuity and FOCI
Gadget Cyber News Weekly Critical Infrastructure: Control, Continuity and FOCI Week ending 12 July 2026 | Five minute CISO briefing Figure 1. This week’s signal: control, continuity and trust are now geopolitical assets. The one line read: In geopolitics, control is a cyber objective. Data still matters, but the ability to interrupt, route, observe, influence or quietly sit inside critical infrastructure may matter more.
Australian Cyber Threat Brief: EOFY, follow the money. Wk5
GADGET Cyber News Weekly EOFY Special: Follow the Money Week ending 30 June 2026 | 5 minute CISO brief Figure 1. The end of financial year threat map, where ransomware, fraud, cloud abuse and identity theft all meet the same thing: money. CISO translation: Cybercrime has always followed value. At end of financial year, it also follows timing. Finance teams are closing books, suppliers are chasing payment, executives are travelling, auditors are asking questions and everyone is allergic to delay.
Australian Cyber Threat Brief: EOFY, follow the money. Wk5
Australian Cyber Threat Brief: The week AI joined the control plane. Wk3 Cybersecurity now has to govern machines that can read, decide and act. CISA's three-day rule, Fortinet credential hygiene, the Arch package compromise, and what changed when AI joined the control plane.
Gadget Cyber News Weekly | Week 4
The Edge Has Teeth: appliances, agents and control planes are now board-level cyber risk. Week ending 26 June 2026 | Five-minute CISO briefing Figure 1. White-background editorial hero image created for this issue. Editorial thesis This week was not about one spectacular breach. It was about a structural shift: attackers are finding leverage in the systems that define trust itself – edge devices, management consoles, ERP platforms, identity flows, AI agents and collaboration tools.
Australian Cyber Threat Brief: The week AI joined the control plane. Wk3
Published: 18 June 2026 Edition: GadgetAccess Cyber Brief Theme: Cybersecurity now has to govern machines that can read, decide and act. This Week’s Cyber News, from GadgetAccess. The story this week is not that AI is replacing security teams. It is that AI has joined the control plane. Every so often, a cyber week tells on itself. This one did. AI models generated safety arguments.
Australian Cyber Threat Brief: The week AI joined the control plane. Wk3
Australian Cyber Threat Brief: The week AI joined the control plane. Wk3 Cybersecurity now has to govern machines that can read, decide and act. CISA's three-day rule, Fortinet credential hygiene, the Arch package compromise, and what changed when AI joined the control plane.
AU Threat Brief-Issue 02: Identity and Browser-to-Script Execution
AU Threat Brief-Issue 02: Identity and Browser-to-Script Execution Week 2 narrows the evidence-led board conversation to identity and browser-to-script execution: can management prove risky script behaviour is restricted, detected and tied to credential reset timing?
Australian Cyber Threat Brief: ‘Are we patched?’ is no longer the question. Wk2
What’s New In Cybersecurity? | A five-minute CISO read | Week ending 14 June 2026 Welcome to Gadget Cyber News Weekly, the five-minute briefing for CISOs who like their cyber news practical, current and only lightly sprinkled with existential dread. This week’s theme is tempo. Vulnerabilities are being found faster, attackers are operationalising faster, and boards are increasingly asking whether security teams can prove action in days rather than weeks.
AU Threat Brief-Issue 02: Identity and Browser-to-Script Execution
Can management prove risky script behaviour is restricted, detected and tied to credential resettiming? AU THREAT BRIEF | ISSUE 02 | SOURCE WINDOW REVIEWED 11 MAY 2026 AU Threat Brief – Issue 02: Identity and Browser-to-Script Execution Can management prove risky script behaviour is restricted, detected and tied to credential reset timing? Theme to expand Identity and browser-to-script execution. This is not a repeat of Week 1. Week 1 established the governing principle: evidence, not reassurance.
What we’re watching this week: Week 1
AU Threat Brief | Source window reviewed 11 May 2026 | Scheduled send: Tuesday 19 May 2026 Executive summary This week is not about one isolated technical issue. The pattern is more useful: attackers are blending legitimate web infrastructure, human behaviour and exposed administration surfaces, while Australian policy settings are moving toward stronger resilience and more disciplined post-incident learning. The board should ask for evidence, not reassurance.
SIEMLINE (Security Information Event Management Linked Intelligence & Network Enablement)
1. Introduction In today’s complex cybersecurity landscape, organizations face an escalating volume and sophistication of cyber threats. Traditional security approaches relying solely on manual incident response and rule-based detection methods are no longer sufficient to counter advanced persistent threats (APTs), sophisticated ransomware, insider threats, and zero-day exploits.
Necessary and sufficient conditions for social science undergraduates’ academic success in English medium instruction settings: a crisp set qualitative comparative analysis
Ayuda Buscar en la ayuda Buscar en la ayuda Necessary and sufficient conditions for social science undergraduates’ academic success in English medium instruction settings: a crisp set qualitative comparative analysis Tang, Yu [1] ; Curtis, Andy [2] [1] Department of English and American Studies, University of Vienna, Vienna, Austria [2] Faculty of Humanities and Social Sciences, City University of Macau, Macao, People’s Republic of China Localización: Journal of multilingual and multicultural...
AI in Cybersecurity: The Financial Case for AI-Powered SIEM Solutions
The meteoric rise of artificial intelligence (AI) in business is undeniable. A recent CNBC report highlights a staggering 500% surge in business spending on AI in 2024, reaching $13.8 billion. While much of this spending fuels transformative projects in automation and data analysis, AI’s role in cybersecurity—particularly in Security Information and Event Management (SIEM)—stands out as a critical area where businesses can achieve cost savings while improving security posture.
Cyber Conferences in Australia
Here is just a few of the notable cybersecurity conferences scheduled in Australia from 2025 to 2027. Please note that event details such as dates and locations are subject to change; it’s advisable to consult the official conference websites for the most current information. Do you have some more to add? Drop us a line using our support@ email address.
Controlled Role and Attribute-Based (CRAB) Access Control: A New Paradigm for Zero Trust Architectures
Controlled Role and Attribute-Based (CRAB) Access Control: A New Paradigm for Zero Trust Architectures Abstract This paper introduces Controlled Role and Attribute-Based Access (CRAB), a novel access control model designed explicitly for contemporary Zero Trust architectures.
Simplifying the Essential 8 Journey with Continuous Compliance Delivery
Navigating the Essential 8 (E8) maturity model can be a daunting challenge, especially for complex government organizations. The ACSC’s E8 framework provides critical guidelines for improving cyber resilience, but its implementation often trips up organizations that take a linear approach—progressing from Maturity Level 1 to 2, and finally to 3.
Implementing ISO 42001: A Framework for Responsible AI Governance in the Australian Government
Executive Summary The integration of artificial intelligence into government operations represents both an unprecedented opportunity and a significant responsibility. As the Australian Government increasingly adopts AI technologies to enhance public services and decision-making capabilities, the implementation of ISO/IEC 42001:2023 emerges as a critical framework for ensuring responsible and effective AI governance.
The Era of Quantum Resilience: Preparing Australian Government Organisations for the Quantum Future
As the world hurtles toward the quantum computing revolution, Australian Government organisations face an unprecedented challenge—and opportunity—to safeguard their digital ecosystems. Quantum computing holds the promise of solving problems beyond the capabilities of classical computers, but it also poses significant threats to the cryptographic foundations of modern cybersecurity. To ensure long-term security, the concept of “Quantum Resilience” has emerged as a critical strategy.
Building Better Teamwork for Cyber Innovation
Introduction In an era where digital threats evolve at an unprecedented pace, Australian cybersecurity teams stand as the critical line of defense against an increasingly sophisticated threat landscape. From devastating ransomware attacks targeting critical infrastructure to complex state-sponsored cyber espionage campaigns, the challenges facing these teams have never been more daunting.
Australia in the Crosshairs: The Rising Threat of Hacktivist Cyber Attacks
Australia’s digital landscape faced a significant escalation in November 2024, as pro-Russian and pro-Palestinian hacktivist groups launched over 60 cyberattacks targeting key industries, from government institutions to financial services and critical infrastructure. These Distributed Denial-of-Service (DDoS) campaigns, driven by ideological and geopolitical motivations, underscore the urgent need for robust cybersecurity defenses.
Raising Venture Capital in Australia
Raising venture capital (VC) is one of the most significant challenges for startups in Australia. The ecosystem is still maturing, and investors tend to be more risk-averse compared to their counterparts in the US and Europe. However, with the right approach, preparation, and understanding of the investment landscape, securing funding is entirely possible. This guide walks you through the essential steps in preparing, pitching, and closing a VC deal in Australia.
Modern Network Access - A Practical Approach to Zero Trust Network Access
The Case for Zero Trust Network Access (ZTNA) In the evolving digital landscape, traditional network security models are increasingly inadequate. Enterprises worldwide face mounting challenges in protecting their distributed workforces and cloud-first environments from sophisticated cyber threats. For decades, network security hinged on the “castle-and-moat” or perimeter-based approach, with VPNs as a trusted mechanism to secure access for remote users.
October 2024 - Gadget Access
The Case for Zero Trust Network Access (ZTNA) In the evolving digital landscape, traditional network security models are increasingly inadequate. Enterprises worldwide face mounting challenges in protecting their distributed workforces and cloud-first environments from sophisticated cyber threats. For decades, network security hinged on the “castle-and-moat” or perimeter-based approach, with VPNs as a trusted mechanism…
Gadget Access
‘Continuous Compliance’: The Evolution and Benefits for Modern Cyber Security In today’s rapidly evolving cyber landscape, maintaining compliance with regulatory standards is a complex yet critical task for enterprises and government agencies alike. Continuous Compliance, a cyber security term first coined by Andrew Curtis nearly 20 years ago, has become a cornerstone in the architecture of cyber uplift programs.
Threat Intel
Most of the resources listed below provide lists and/or APIs to obtain (hopefully) up-to-date information with regards to threats. Some consider these sources as threat intelligence, opinions differ however. A certain amount of (domain- or business-specific) analysis is necessary to create true threat intelligence. AbuseIPDB AbuseIPDB is a project dedicated to helping combat the spread of hackers, spammers, and abusive activity on the internet.
The 2023-2030 Australian Cyber Security Strategy: A Vision for the Future
It’s always worth taking a look at the latest government strategies – In particular, the new “2023–2030 Australian Cyber Security Strategy: A Vision for the Future” – It can be found here: In the strategy paper, the Australian Government has set forth an ambitious vision for the future of cyber security in the country. It’s is a comprehensive roadmap that aims to position Australia as a world leader in cyber security by 2030.
Understanding the November 2023 Updates to the ACSC’s Essential 8 Maturity Model
The Australian Signals Directorate (ASD) has recently updated its Essential Eight Maturity Model, reflecting the evolving cybersecurity landscape and the need for more robust defenses against increasingly sophisticated threats. Below is an overview and analysis of the key changes made in November 2023, highlighting their significance and implications for organizations striving to enhance their cybersecurity posture.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Andy
Contact Andy, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack