Calexi

The 2026 ASIO Annual Threat Assessment reinforces a clear message for Australia's Defence industry. The threat environment has fundamentally changed. Espionage, foreign interference, cyber operations, supply chain compromise and preparation for sabotage are no longer isolated risks. They are converging into a complex operating environment that demands a more resilient approach to ICT and cybersecurity. At Calexi, we believe organisations supporting Defence and critical infrastructure should be moving beyond compliance towards security that is built into architecture, operations and governance from the outset. We've published an analysis of the assessment from a Defence industry ICT perspective, covering: • Identity as the primary security boundary. • Supply chain security. • Detection and response. • Secure by Design. • Building resilience against nation-state threats. We encourage leaders across Defence industry to read the assessment and consider what it means for their own organisations. Read our analysis below. https://lnkd.in/gGdHnDwx #Defence #CyberSecurity #ASIO #ICT #CriticalInfrastructure #SecureByDesign #CyberResilience #DefenceIndustry

Know an SME looking for IT support that understands the Essential Eight, Maturity Level 2 and DISP requirements? We help organisations strengthen their cyber security, meet compliance obligations and deliver secure, reliable IT services. Share our details with your network or get in touch to discuss how we can help.

The 2026 National Defence Strategy is a strong step forward for Australia’s defence posture. But cyber feels like an afterthought. In a world where conflict is already playing out in the digital domain, that is a gap we cannot afford.

Over the weekend, I reviewed the National Defence Strategy 2026 and the Integrated Investment Program 2026. There is clear commitment by government to defence and national security. That should be recognised as a positive step forward. But the treatment of cyber is underwhelming. Cyber is not a supporting function. It is foundational. It underpins every domain. Maritime, land, air, space, and information. It shapes the battlespace before conflict, influences outcomes during operations, and determines resilience afterwards. Yet it is still being treated as secondary. This is a strategic failing. When you look at the numbers, the gap becomes obvious. The Integrated Investment Program allocates hundreds of billions to ships, aircraft, land systems, and guided weapons. Cyber, by comparison, remains a small fraction of total investment. Well under 5 percent. The only major, clearly defined cyber program is REDSPICE. It sits within the intelligence community, not as a deployable Defence capability. That is not alignment. That is imbalance. What stands out is continued over-reliance on centralised, intelligence-led capability rather than building Defence-native cyber capability across tactical, operational, and strategic levels. This is not a minor risk. It puts lives at risk. Cyber effects do not come solely from central organisations. They must be embedded with the force, integrated into operations, and available at the edge. Right now, the gap is clear: - Over-reliance on centralised capability - Insufficient investment in deployable cyber capability - Limited focus on operational integration at all levels If this continues, Australia risks building a force that is technologically advanced but operationally constrained. Cyber is not future capability. It is current capability. It is in persistent conflict. It needs to be treated that way.

At Calexi, we don’t accept mediocre. We learn fast and keep moving. We see the same failures every day. Systems and security that don’t hold under pressure. Shiny, expensive tools that are never properly implemented and never reach where they matter. How? We engineer solutions. We are solving communications in denied and degraded environments. We are delivering capability onto the battlefield where it matters. We are protecting Defence industry and critical infrastructure against real threats. If you’re dealing with these problems or want to be part of what we’re building, reach out. Watch what comes next.

The fuel disruptions emerging across Australia have the team at Calexi asking a simple question. What’s the real impact for our clients? If you and your organisation wants a review of your technology structure, supply chain dependencies, Disaster Recovery or Business Continuity plans. Please reach out. We are here to help.

Don’t believe this post! Seriously. If you trust everything you see online by default, you are already behind. They say imitation is the ultimate form of flattery. Today, it’s a weapon. - Content is clipped. - Context is stripped. - Narratives are engineered. From deepfakes to AI-generated messaging, to bot-amplified outrage, information is no longer just shared… it’s shaped. And not always in your interest. So who do you trust? Not a single source. Not blindly. Not even this message. Because the reality is uncomfortable: - Even “trusted” institutions optimise messaging. - Even experts carry bias. - Even legitimate content can be manipulated. The answer isn’t less information, it isn't trusted sources. It’s more information critically analysed by you. If you want to stay secure: - Validate across multiple sources - Question intent, not just content - Look for what’s missing, not just what’s said - Be sceptical of absolutes (“best”, “only”, “must”) - Demand transparency, trade-offs, and context Because security isn’t about tools. It’s about judgement. And judgement requires effort. If someone tells you there’s only one answer they’re selling something and its probably a load of bull. At Calexi, we don’t sell silver bullets. We give you options, explain the trade-offs, and help you make informed decisions. No hype. No shortcuts. No manipulation. Just clarity. We will always have your back. www.calexi.com.au

The cyber front of the Iran conflict is well and truly active. Following the US and Israeli strikes on Iran, more than 60 hacktivist groups mobilised online and began launching DDoS attacks, defacements and data-leak campaigns against government and corporate targets. These campaigns are already hitting Western organisations. An Iran-linked hacker group recently disrupted a US medical technology company as part of retaliation activity tied to the conflict. This is how geopolitical cyber escalation usually begins. Not with sophisticated nation-state attacks. With noisy hacktivist campaigns probing the edges of allied ecosystems. For Australian defence industry and critical infrastructure organisations the message is simple. Expect increased scanning, DDoS attempts, phishing campaigns and opportunistic intrusions. What to do now: - Enable MFA everywhere - Patch internet facing systems - Monitor logs and external exposure - Test incident response readiness Cyber conflict spreads across alliances and supply chains faster than many organisations expect. Sources https://lnkd.in/gGMEEwFt https://lnkd.in/gAzGEF-w #CyberSecurity #DefenceIndustry #CriticalInfrastructure #Australia

Delete the apps you don’t use. Check what your kids are installing. Review app permissions. Your activity can be used to target your kids as much as theirs can be used to target you. Multiple recent investigations have found that location data collected through ordinary smartphone apps can reveal where people work, where they live, and their daily routines. The data comes from the advertising ecosystem built into many apps. Phones broadcast advertising identifiers that can be linked to precise location history over time. When analysed at scale, those datasets can expose patterns such as: • home addresses • workplaces • daily movements • who people regularly spend time with In one recent investigation journalists were able to trace movements between sensitive government facilities and private homes. That should make anyone in defence, government, critical infrastructure, or regulated industries pause for a moment. This is not about panic. It is about digital hygiene. A few simple habits go a long way: • delete apps you no longer use • remove old or unsupported apps • check which apps have location access • keep an eye on what your kids install Most apps are harmless. But every unused app is another data tap you probably do not need running. Sometimes the best cyber security control is just a quick clean up of your phone. https://lnkd.in/esS6hKFE #CyberSecurity #DigitalHygiene #Privacy #DefenceIndustry #CriticalInfrastructure #CyberAwareness #FamilySafety #Calexi #Australia

Once Essential Eight is in place properly, it becomes much easier to improve security without large cost increases or major disruption. The key is getting the foundation right.  • Controls that are embedded, not bolted on  • Clear ownership and accountability  • Security that scales with the business At Calexi, we start with ML2 as baseline hygiene and then help Defence SMEs build security maturity that actually makes sense for their size and risk. If you want security that grows with you instead of holding you back, we have your back. #Cybersecurity #EssentialEight #Defence #SME