Tactics of leading cybercriminal groups against the MITRE ATT&CK framework

by Kat McCrabb | Mar 4, 2025 | Compliance Resilience

Cybercriminal groups continue to refine their tactics, techniques, and procedures (TTPs), many of which align with the MITRE ATT&CK framework—a globally recognised model for understanding adversary behaviour. To counter these evolving threats, organisations need...

Legal, Contractual and Cyber Risks of Unsupported Operating Systems

by Kat McCrabb | Feb 25, 2025 | Compliance Governance Resilience Uplift

With Windows 10 reaching end of support, organisations face growing cyber security threats and compliance risks. Unsupported systems no longer receive security patches, making them vulnerable to exploits. Businesses operating in regulated industries must also consider...

Strengthening cyber resilience: Flame Tree Cyber’s response to proposed cyber security regulations

by Kat McCrabb | Feb 12, 2025 | Governance Resilience Uplift

Cyber security regulations introduce important protections. Flame Tree Cyber welcomes the opportunity to contribute expert insights into new subordinate legislation under the Cyber Security Act and Security of Critical Infrastructure Act 2018 (SOCI Act) This post...

Commentary on the proposed Cyber Incident Review Board rules

by Kat McCrabb | Feb 4, 2025 | Compliance Governance Resilience

Australia’s proposed Cyber Incident Review Board (CIRB) aims to enhance national cyber resilience. The draft rules outline the Board’s structure and functions, but the requirement for Ministerial approval of Terms of Reference raises concerns about...

Strengthening incident resilience: Guidance for organisations

by Kat McCrabb | Oct 22, 2024 | Resilience

Incident resilience is critical for organisations to withstand and recover from cyber security breaches and other disruptive events. Achieving resilience is not about reacting to an incident but involves comprehensive preparation, structured response, and continual...