Refuting Cyber Skills Frameworks
23 Oct 2025This week, I took part in a roundtable discussion hosted by Home Affairs on uplifting the cyber workforce. One idea that came up several times was that the ...
Read more →Benjamin Mossé Thinking in systems. Reasoning from evidence and logic.
Cyber in Australia (6)
A close look at how cybersecurity works in Australia, and the cultural and conceptual foundations that I aim to challenge.
Active Defense and Hacking Back
22 Oct 2025This week, I joined a roundtable discussion on Active Defense - a topic I’ve explored before and even wrote a paper about back in 2016. It’s been some time s...
Read more →
Why Cyber Education in Australia is F*cked
08 Oct 2025Everyone says Australia’s cybersecurity education system is broken. It isn’t — it’s doing exactly what it was built to do. It absorbs public money, recycles...
Read more →
Red Teaming Australia's National Cyber Strategy (2025)
07 Sep 2025Imagine you are part of a cybercriminal gang, deciding which region of the world to target next. Australia has always been lucrative, but now there’s talk of...
Read more →
When a Cybersecurity Standard Becomes the Villain
17 May 2025Nothing says “we’re here to help small businesses” quite like charging $95 to read the rules - and threatening to sue if you share them. This is the story of...
Read more →
Ransomware ‘69s’ Australia
20 Apr 2025ACN’s State of the Industry 2024 report states that “69 per cent of businesses have experienced a ransomware attack” (p. 21 and 27). This is obviously an er...
Read more →