ZeroHour

Search: “ASD”

4 stories

Australia is replacing the Essential Eight with a new cyber framework. Here’s how exposure management can help you get ahead of it.

Australia's ASD is replacing the Essential Eight with an outcomes-based Essentials series covering IT, cloud, OT and likely agentic AI, with deprecation from mid-2027.

The Australian Signals Directorate announced in June 2026 that the Essential Eight will be replaced by an outcomes-focused Essentials series structured as chapters covering enterprise IT (including identity and SaaS), cloud, OT, and likely agentic AI. Deprecation begins around mid-2027 with full retirement around mid-2028, though timelines are targets; the Essential Eight is mandatory for roughly 98 non-corporate Commonwealth entities but voluntary for private firms. Tenable argues the shift demands continuous security posture evidence via exposure management rather than point-in-time checklist assessments.

Tenable Blog · 1d agoPolicy & legal1

Boardroom Battles 2026: ASD’s Cyber Priorities & AI Risk

Huntress analyzes the Australian Signals Directorate's 2026 board cyber priorities and frontier AI guidance on managing AI-era threats.

Huntress analyzed the Australian Signals Directorate's 2026 boardroom cyber priorities and its guidance on frontier AI risk. The piece argues that rapid AI adoption alone will not counter AI-era cyber threats and outlines what boards should focus on. No specific incident, vulnerability, or regulation change is described.

Huntress · 17d agoPolicy & legal

Hacker Conversations: Vinnie Liu, Performer Turned Ringmaster

SecurityWeek interviews Bishop Fox CEO Vinnie Liu, recruited by the NSA at 17 in 1999, on hacker ethics, intent, and his career.

SecurityWeek's Hacker Conversations series profiles Vinnie Liu, who was recruited by the NSA in 1999 at age 17 via an IRC contact and later became CEO of security consulting firm Bishop Fox. The interview covers his white-hat philosophy that hacking for fun differs from hacking to harm, the moral development he attributes to parents and educators, and the industry's shift from the NSA to commercial firms like @stake after its 2000 acquisition of L0pht Heavy Industries. The piece is biographical and opinion-oriented with no incident, vulnerability, or research content.

SecurityWeek · 6d agoIndustry