Author: Matthew Miller

A Closure for Regional Connectivity Assistance

The Regional Tech Hub, an essential service for rural Australians in need of connectivity solutions, is preparing to close at the end of August. This signifies the end of an important chapter in assisting 80,000 households with technology advice, as the hub concludes its activities after five and a half years.

Funding Issues and Government Choices

The National Farmers Federation (NFF), which operated the hub, revealed that it was unable to secure alternative funding after the federal government’s refusal to extend its financial backing in the latest budget. The hub’s direct services officially halted on June 30, with its resources expected to become inaccessible by the end of August.

NFF CEO Michael Guerin voiced his dismay regarding the government’s decision, highlighting the continued need for independent, straightforward support as telecommunications technology grows more intricate and change approaches, like the universal outdoor mobile obligation. While the government is investing in regional telecommunications infrastructure, many still struggle to comprehend and make use of this infrastructure.

History and Influence of the Regional Tech Hub

Although it was officially launched in December 2020, the Regional Tech Hub can trace its origins back to 2018, emerging from a volunteer organization under the Better Internet for Rural, Regional and Remote Australia (BIRRR) initiative. These volunteers helped rural telco customers tackle connectivity problems, including mediation and escalation for NBN fixed wireless and Sky Muster connections.

Future Possibilities and Funding Prospects

The federal government initiated its support for the Regional Tech Hub with a $2 million yearly grant from the Better Connectivity Plan for Regional and Rural Australia (BCPRRA) in 2023. However, funding for BCPRRA is anticipated to see a significant drop in the forthcoming years—from $116 million this financial year to $32 million by FY2027-28, ultimately plummeting to $780,000 by 2029-30.

In spite of these obstacles, Guerin mentioned that the NFF remains dedicated to the program and is willing to resume operations if a viable funding solution is identified. “Since the demand for connectivity support persists, as does our faith in the program, the NFF welcomes the opportunity to reinstate this vital service should a sustainable funding opportunity arise in the future,” he stated.

Conclusion

The shutdown of the Regional Tech Hub signifies a substantial change in the support for rural connectivity within Australia. With funding cuts imminent for regional projects, the future of such services is uncertain, though efforts to secure alternative funding may provide some hope for continued operations.

Q: What is the reason for the closure of the Regional Tech Hub?

A: The hub is closing due to the federal government’s choice not to renew funding, and no alternative funding options have been secured.

Q: How many households received support from the Regional Tech Hub?

A: The hub offered technical connectivity guidance to about 80,000 rural households.

Q: What was the role of the National Farmers Federation?

A: The NFF managed the Regional Tech Hub and is actively pursuing alternative funding to potentially maintain its services.

Q: What does the Better Connectivity Plan for Regional and Rural Australia entail?

A: BCPRRA is a governmental initiative aimed at enhancing connectivity in rural and regional areas, though it is confronting considerable funding cuts in the upcoming years.

Q: Is there a chance the Regional Tech Hub will operate again in the future?

A: The NFF is open to resuming the hub’s operations if a sustainable funding solution can be identified.

Coles Expands Outsourcing with Accenture, Affecting Jobs in Australia

Details of the Expanded Partnership

Coles Group has revealed an extension of its outsourcing agreement with Accenture, which will enable the retailer to bolster its technology, digital, and specialized skills. This expanded collaboration is anticipated to influence several hundred roles in Australia, as certain back-office responsibilities are shifted to Accenture both domestically and internationally.

Brief Overview

• MSPs can utilize a cohesive IaaS solution to lower costs and simplify processes.
• Acronis Cyber Frame provides both cloud and local variations for customized IaaS implementation.
• Incorporated security and backup solutions boost data security and operational effectiveness.
• Minimizes reliance on highly skilled IT personnel, addressing the worldwide skills shortage.
• Paves the way for new income sources by transitioning workloads from outdated systems to state-of-the-art infrastructures.

Overview of Acronis Cyber Frame

Acronis Cyber Frame, a specialized IaaS and hyperconverged infrastructure offering, is designed to assist Managed Service Providers (MSPs) and Cloud Service Providers (CSPs) in addressing ongoing challenges and tapping into new revenue sources. Acronis, a Swiss expert in cybersecurity and infrastructure, delivers this solution to empower MSPs in providing virtual machines, storage, networking services, and comprehensive security solutions.

Streamlining Tool Overload and Complexity

The Acronis Cyber Frame unifies infrastructure, protection, and management into one platform, significantly lowering the complexity and expenses linked to using numerous disconnected tools. This strategy not only simplifies the operational environment for service providers but also strengthens their capacity to deliver secure, dependable services to their customers.

Discovering Revenue Possibilities

By migrating client workloads from outdated virtualization systems to Acronis Cyber Frame, MSPs can create partner-branded cloud solutions and initiate IaaS without major hardware expenditures. This shift not only generates new revenue channels but also fosters more stable infrastructure settings.

Integrated Security and Lowered Costs

Fully incorporated into the Acronis Cyber Platform, Cyber Frame presents a complete set of tools, including backup and AI-driven anti-malware services, promoting strong data safeguarding. This integration minimizes the necessity for MSPs to maintain a large, highly skilled support staff, thereby reducing costs and alleviating the effect of the global skills deficit.

Conclusion

Acronis Cyber Frame delivers a revolutionary solution for MSPs, tackling persistent issues related to tool overload, operational complexity, and unpredictable infrastructure. Through this platform, service providers can enhance their service capabilities, optimize their operations, and unlock new revenue potentials, while ensuring high standards of security and efficiency.

Q&A Segment

Q: What is Acronis Cyber Frame?

A: It is a specialized IaaS and hyperconverged infrastructure solution aimed at assisting MSPs and CSPs in delivering integrated virtual machines, storage, networking, and security services.

Q: How does Acronis Cyber Frame aid MSPs?

A: It simplifies complexities and reduces costs by consolidating infrastructure management and security functions into one platform, allowing MSPs to introduce new income sources and enhance operational efficiency.

Q: What are the deployment choices for Acronis Cyber Frame?

A: The solution is provided in two forms: Acronis Cyber Frame Cloud, which operates from Acronis regional data centers, and Acronis Cyber Frame Local, which converts an MSP’s servers into a multitenant IaaS solution.

Q: How does Acronis Cyber Frame tackle security issues?

A: It possesses integrated functionalities like backup, AI-driven anti-malware, and endpoint protection management, lowering the risk of data breaches and ensuring business continuity.

Q: Can Acronis Cyber Frame assist with the global skills deficit?

A: Certainly, by minimizing the demand for highly skilled technical staff, it cuts down recruitment expenses and empowers existing personnel to manage reduced operational complexity, lowering the risk of burnout.

Q: What new revenue streams does Acronis Cyber Frame create?

A: It enables MSPs to transfer workloads from legacy systems to modern infrastructures, build partner-branded cloud solutions, and provide regional or sovereign IaaS offerings.

Brief Overview

• Conventional 5×5 risk matrices can give boards a misleading impression of clarity.
• Cyber threats function in a manner distinct from other risks, such as fire or flooding, rendering traditional frameworks inadequate.
• Cyber risks are fluid, necessitating prioritization models that can adapt to swift changes.
• Prioritization is essential given resource constraints and the requirements for strategic financial planning.
• Conventional models frequently oversimplify complex information, resulting in the loss of critical insights.

Recognizing the Constraints of Standard Cyber Risk Evaluation

Many cyber risk heatmaps appear orderly. They provide a clear visual summary—simple for boards to comprehend. Nevertheless, this seemingly straightforward nature contributes to the issue. Traditional 5×5 risk matrices can create a deceptive sense of clarity, often neglecting the vital question: where should the subsequent dollar of the cyber budget be allocated?

Luke Irwin, Aegis Cybersecurity

The Ever-Changing Landscape of Cyber Threats

In contrast to conventional risks such as fire or water damage, cybersecurity threats are intentional, strategic, and adaptable. Attackers may act in a targeted, opportunistic, automated, or persistent manner. Traditional risk models, designed for static threats, find it challenging to cope with this fluidity.

The Limitations of the 5×5 Framework

Corporate risk matrices generally employ long-term planning perspectives, which are poorly matched for the brisk environment of cybersecurity. Decisions must often be made in hours instead of years. The 5×5 framework can overly trivialize the intricacies of cyber threats, condensing them into a colored square that provides minimal practical direction.

Prioritisation and Resource Management

The primary obstacle is prioritisation. When numerous risks are evaluated as equally critical, organizations struggle with determining which to tackle first. This absence of prioritisation can result in poor budget distribution, lost chances for risk mitigation, and insufficient responses to dangers.

The Influence of Controls in Risk Oversight

Various controls impact risk in different manners. Multi-factor authentication may lessen the likelihood of breaches but does not mitigate the consequences of incidents. Encryption can reduce the severity of damage, yet it does not avert attacks. Monitoring and detection can alleviate damage but cannot prevent initial intrusions. A thorough cyber risk evaluation must address these subtleties.

Final Thoughts

The 5×5 framework presents the promise of structured risk oversight; however, it frequently falls short in delivering actionable insights. Cybersecurity necessitates frameworks that mirror its distinct, rapidly changing environment. Organizations require instruments that facilitate informed prioritisation and resource distribution to effectively safeguard their digital resources.

Synopsis

The conventional 5×5 risk evaluation framework is inadequate for cybersecurity, as it fails to address the dynamic, adversarial characteristics of cyber threats. Organizations require models that are more flexible and nuanced for efficiently prioritising risks and managing resources.

Q: Why are conventional risk matrices inadequate for cybersecurity?

A: Traditional matrices are tailored for static threats and do not consider the dynamic, adaptive properties of cyber threats.

Q: What distinguishes cyber threats from other risks like fire or flooding?

A: Cyber threats are intentional, targeted, and able to evolve in response to countermeasures, in contrast to static risks.

Q: How do conventional models fall short in prioritisation?

A: They often assess multiple risks as equally severe, complicating effective resource allocation.

Q: What should organizations take into account in cyber risk evaluation?

A: They should evaluate the unique impacts of different controls and the evolving nature of threats.

Q: How can organizations enhance their cyber risk management?

A: By implementing frameworks that adapt to rapid changes and offer clear prioritisation for resource allocation.

Brief Overview

• Midnight Blizzard, a Russia-affiliated group, aims at hotel Wi-Fi worldwide with CaptiveCrunch.
• Attackers seek to acquire user credentials and introduce malware through breached networks.
• Essential tools employed consist of the CornFlake RAT and ChocoShell infostealer.
• Recommended actions involve multi-factor authentication and utilizing secure travel routers.

CaptiveCrunch attack flow. Source: Microsoft

Exploring CaptiveCrunch

Since May 2026, CaptiveCrunch has infiltrated captive portal systems at hotels and various locations providing guest Wi-Fi. This effort is attributed to Storm-2945, part of the Russian state-associated group known as Midnight Blizzard.

Technical Insight

As noted by Microsoft, the attack reroutes travelers to phishing frameworks and deploys malware masked as updates. Midnight Blizzard is connected to Russia’s SVR intelligence agency. While the precise number of impacted sites remains unclear, cases have been documented in nations including the United States, India, and Saudi Arabia.

Instruments and Strategies

The perpetrators utilize tools like CornFlake, a remote access trojan capable of keylogging and additional functions, along with ChocoShell, an infostealer aimed at browser cookies and user credentials. Android devices could also face threats from malicious APK prompts. The phishing framework frequently exploits Microsoft’s device code authentication process.

Proposed Security Strategies

Microsoft recommends that organizations prevent Entra ID device code authentication where not essential and enforce multi-factor authentication or passkeys. Viewing public Wi-Fi as unreliable and employing secure travel routers or VPNs is strongly advisable.

Conclusion

CaptiveCrunch represents a serious risk to hotel Wi-Fi systems worldwide, with Midnight Blizzard utilizing advanced techniques to breach traveler data. Implementing strong security measures can help alleviate these threats.

Common Questions

Q: What is CaptiveCrunch?

A:

CaptiveCrunch is a cyber-attack initiative targeting hotel Wi-Fi networks, associated with the Russian group Midnight Blizzard, with the intent of stealing credentials and spreading malware.

Q: How does CaptiveCrunch operate?

A:

It compromises captive portal systems, redirecting travelers to phishing URLs and delivering malware disguised as genuine updates.

Q: What tools are utilized in CaptiveCrunch?

A:

Main tools comprise the CornFlake remote access trojan and the ChocoShell infostealer, focusing on browser cookies, passwords, and Wi-Fi credentials.

Q: How can individuals safeguard themselves from this threat?

A:

Implement multi-factor authentication, regard public Wi-Fi as unsafe, and use secure travel routers or VPNs to protect personal data.

Q: What are the ramifications for businesses?

A:

Companies should secure their workforce’s data by adhering to recommended protocols and educating employees regarding the dangers of public Wi-Fi.