The Computer Department (Cyber Defensive) · Research & Awareness Team

We don't just watch the cyber world from the outside — we've been involved in it through years of participation in the Australian Government's R&D Tax Incentive (R&DTI) program, administered by AusIndustry (Department of Industry, Science and Resources) and the Australian Taxation Office, supporting eligible research activities across many industry sectors. That long history of working with government-backed research gives us a steady, grounded view of what really matters online — and what is just noise.

Lately, a big slice of our work has been in cybersecurity — the same field where Australia's own Australian Cyber Security Centre (ACSC), part of the Australian Signals Directorate (ASD), serves as the Government's lead technical authority. ASD's ACSC monitors cyber threats around the clock, runs the 24/7 Australian Cyber Security Hotline (1300 CYBER1 / 1300 292 371), and publishes practical guidance that Australian organisations rely on every day. You won't need to know any of those names to read this newsletter — we're telling you only so you know: every piece of advice we share is rooted in real-world research and aligned with the same frameworks Australian organisations depend on.

The above are six of the eight strategies from the Essential Eight — a baseline published by ASD's ACSC designed to make it meaningfully harder for adversaries to break in. We'll explore each of these in friendly, practical detail across future issues.

Let's be honest with each other. The cybersecurity world is unfortunately full of jargon — social engineering, phishing, malware, zero-day, attack surface, threat actor — all thrown around as if everyone grew up speaking it. Most of that language is really just everyday English dressed up in technical clothing. And wherever it isn't, we'll always give you the plain "every man and every woman" version first. No gatekeeping. No showing off.

After decades of research alongside governments, security agencies and incident response teams, one thing has become very clear. Genuine awareness means understanding the language attackers use — even if some of it sounds a little like warfare, because that is exactly what it is. In every issue, we'll always do two things: explain the everyday version first, so it makes sense in your real life — then gently introduce the official term, so when you see it in the news, on a bank email, or in a message from your IT team, you know exactly what it means, and exactly what to do. Think of it as learning just enough of this digital warfare language to stay one step ahead — not to frighten you, but to make sure you, your family and your business never become the easy target.

Every issue will respect your time and your peace of mind. If something is genuinely urgent, we'll say so plainly. If something is just interesting or useful, we'll keep it light. If a tip ever feels above your comfort zone, we'll always give a simpler alternative. And if you ever want to write back with a question, a confusion, or even a "what on earth does this mean?" — please do. The whole point of this newsletter is that no question is too small.

We're not here to turn anyone into a tech expert. We're here to make the digital part of your life feel safer, calmer, and a little more understandable — the way a helpful neighbour would. Welcome aboard. We're glad you're here.