Cyber Threat Analysis & SOCI Act Insights

Announcements

October 28, 2026

ASD Essentials: What Actually Gets Easier

On 15 October 2026, the Australian Signals Directorate (ASD) published ASD Essentials as the evolution of their Essential Eight (E8) framework

Learn More

Informational

September 3, 2026

Consumer wearables, the enterprise security threat

AI-enabled consumer wearables have moved beyond far-fetched gadgets into something people use in everyday life, from your local barista to the stranger next to you on the train.

Learn More

Informational

August 28, 2026

The Gentlemen, a rapidly proliferating ransomware-as-a-service syndicate

The Gentlemen is an established criminal ransomware-as-a-service syndicate with a differentiated pricing model: taking a smaller margin from its affiliates.

Learn More

Announcements

May 19, 2026

Defining Bi-Directional Intelligence Sharing in Australia’s Critical Infrastructure Sectors Through the 2026 SOCI Act Review

For the better part of a decade, intelligence sharing across Australia’s critical infrastructure community has operated as a one-way street.

Learn More

Announcements

May 13, 2026

Australia’s Cyber Threat Environment Is Escalating: What an Elevated Threat Level Means for Critical Infrastructure Security and Resilience

As of March 2026, CI-ISAC has raised and sustained the Cyber Threat Level at Elevated.

Learn More

Threat Intelligence

May 5, 2026

Bidirectional Threat Intelligence Is Here Under SOCI Reform: How Critical Infrastructure Organisations Can Operationalise It

The geopolitical environment Australia is navigating today has fundamentally changed the risk matrix for critical infrastructure.

Learn More

Risk Management

March 3, 2026

Planning for Cyber Risk in Uncertainty: How Cross-Sector Threat Visibility Shapes Executive Decisions

Executive teams across Australia’s critical infrastructure sectors are expected to make decisions about cyber risk, investment, and capability in a landscape that rarely feels settled.

Learn More

Threat Intelligence

February 26, 2026

Seeing the Pattern Before the Incident: Why Threats Rarely Stay in One Sector

Cyber incidents affecting critical infrastructure are often described as discrete events. An issue emerges in one organisation, is investigated locally, and addressed within that environment.

Learn More

The SOCI Act Review

The Independent Review of the Security of Critical Infrastructure Act 2018 recommends mandatory cyber threat intelligence sharing and bi-directional government to industry exchange. The Government has accepted all six recommendations in principle.

CI-ISAC's full position statement covers what the review found, what Recommendations 5 and 6A require, and what the Tranche 2 consultation window means for operators.

From the Review

70%

CI-ISAC News & Analysis

ASD Essentials: What Actually Gets Easier

Consumer wearables, the enterprise security threat

The Gentlemen, a rapidly proliferating ransomware-as-a-service syndicate

Defining Bi-Directional Intelligence Sharing in Australia’s Critical Infrastructure Sectors Through the 2026 SOCI Act Review

Australia’s Cyber Threat Environment Is Escalating: What an Elevated Threat Level Means for Critical Infrastructure Security and Resilience

Bidirectional Threat Intelligence Is Here Under SOCI Reform: How Critical Infrastructure Organisations Can Operationalise It

Planning for Cyber Risk in Uncertainty: How Cross-Sector Threat Visibility Shapes Executive Decisions

Seeing the Pattern Before the Incident: Why Threats Rarely Stay in One Sector

The SOCI Act Review

From the Review

of stakeholder sentiment about the SOCI Act was negative, on its pace rather than its intent

recommendations, all accepted in principle by Government