CyberCraft InsightsExpert analysis on AI adoption, cybersecurity, and risk management for Australian and New Zealand businesses.https://www.cybercraft.net/Your Accounting Software Is Already Using AI — New Guidance Explains What That Means for Your Datahttps://www.cybercraft.net/blog/ai-embedded-accounting-software-tpb-guidance/https://www.cybercraft.net/blog/ai-embedded-accounting-software-tpb-guidance/Xero, MYOB and Microsoft 365 now process client data through embedded AI by default. New Tax Practitioners Board guidance flags the compliance gap — and it affects every business that uses them.Mon, 06 Jul 2026 00:00:00 GMTAIAI GovernancePrivacyComplianceProfessional ServicesAustralia Is the World's Most Cautious AI Adopter — and That's Costing More Than It Saveshttps://www.cybercraft.net/blog/ai-trust-barrier-australian-business-adoption/https://www.cybercraft.net/blog/ai-trust-barrier-australian-business-adoption/Only 30% of Australians think AI's benefits outweigh the risks — the lowest of any country. The fix for that caution is also what unlocks the returns.Mon, 29 Jun 2026 00:00:00 GMTAIAI AdoptionAI GovernanceResponsible AISMECyber Insurance Is a Buyer's Market Again — But Only If You Can Prove the Basicshttps://www.cybercraft.net/blog/cyber-insurance-controls-sme-renewal/https://www.cybercraft.net/blog/cyber-insurance-controls-sme-renewal/Australian SMEs lose an average of $56,600 per cybercrime report. Cover is cheaper than it was, but insurers now want evidence of controls before they sign.Mon, 22 Jun 2026 00:00:00 GMTCyberCyber InsuranceRisk ManagementEssential EightAI Is Making Your Decisions — From December You Have to Say Sohttps://www.cybercraft.net/blog/ai-automated-decision-transparency-privacy-act-2026/https://www.cybercraft.net/blog/ai-automated-decision-transparency-privacy-act-2026/From 10 December 2026, businesses using AI in decisions that affect customers must disclose it in their privacy policy. Government data shows most aren't ready.Mon, 15 Jun 2026 00:00:00 GMTAIAI GovernancePrivacyComplianceAutomated Decision-MakingThe Box in Your Comms Cupboard: Why Your Firewall and VPN Are Now Prime Targetshttps://www.cybercraft.net/blog/edge-devices-firewalls-vpn-sme-target/https://www.cybercraft.net/blog/edge-devices-firewalls-vpn-sme-target/Edge devices — firewalls, routers and VPN gateways — are now a primary way attackers get into Australian SMEs. The fix is unglamorous: patch, replace, and turn off what you don't use.Mon, 15 Jun 2026 00:00:00 GMTCyberNetwork SecurityThreat LandscapeRisk ManagementSMEWhy Most Australian Businesses Aren't Seeing a Return on AI — Yethttps://www.cybercraft.net/blog/ai-roi-gap-australian-businesses/https://www.cybercraft.net/blog/ai-roi-gap-australian-businesses/PwC found 74% of real financial returns from AI go to just 20% of companies. The dividing line isn't the technology — it's whether you redesign how work gets done.Tue, 02 Jun 2026 00:00:00 GMTAIAI AdoptionProductivityAI StrategySMEAustralia's Privacy Tort Turns One: The Civil Liability Most SMEs Still Don't Seehttps://www.cybercraft.net/blog/privacy-tort-one-year-sme-civil-liability/https://www.cybercraft.net/blog/privacy-tort-one-year-sme-civil-liability/Australia's statutory tort for serious invasions of privacy turns one on 10 June. The first court test confirms it has teeth — and SMEs are exposed.Mon, 25 May 2026 00:00:00 GMTCyberPrivacyComplianceRisk ManagementSMEAI-Adopting Firms Are Hiring 36% More: What That Means for Australian SMEshttps://www.cybercraft.net/blog/ai-adopters-hiring-more-australian-smes/https://www.cybercraft.net/blog/ai-adopters-hiring-more-australian-smes/New CSIRO research finds Australian firms that adopted AI posted 36% more jobs than non-adopters. The real divide isn't humans versus machines.Mon, 18 May 2026 00:00:00 GMTAIAI AdoptionWorkforceProductivitySMEAgentic AI Is Already in Your Business — Here's What That Actually Meanshttps://www.cybercraft.net/blog/agentic-ai-australian-business-readiness/https://www.cybercraft.net/blog/agentic-ai-australian-business-readiness/69% of Australian organisations already use AI agents. Only 22% have adequate governance. New joint government guidance published this week explains the risks.Mon, 04 May 2026 00:00:00 GMTAIAI GovernanceAI StrategyAgentic AIRisk ManagementThe $97,000 Email: Why Business Email Compromise Keeps Beating Australian SMEshttps://www.cybercraft.net/blog/business-email-compromise-australian-sme-threat/https://www.cybercraft.net/blog/business-email-compromise-australian-sme-threat/BEC fraud now accounts for 15% of all business cybercrime in Australia, with medium businesses losing an average of $97,166 per incident. The defence isn't a tool — it's a process change.Mon, 27 Apr 2026 00:00:00 GMTCyberBusiness Email CompromiseFraud PreventionRisk ManagementSMEShadow AI Is Already in Your Business — What to Do About Ithttps://www.cybercraft.net/blog/shadow-ai-workplace-risk-governance/https://www.cybercraft.net/blog/shadow-ai-workplace-risk-governance/49% of employees use unsanctioned AI tools at work. In Australia, 92% of leaders say that introduces risk. Here's what to do before a shortcut becomes a breach.Mon, 20 Apr 2026 00:00:00 GMTAIShadow AIAI GovernanceData PrivacyRisk ManagementThe AI Vulnerability Storm: What It Actually Means for Your Businesshttps://www.cybercraft.net/blog/ai-vulnerability-storm-what-it-means-for-your-business/https://www.cybercraft.net/blog/ai-vulnerability-storm-what-it-means-for-your-business/Anthropic's Claude Mythos found thousands of critical vulnerabilities across every major OS and browser. Here's what Australian business owners need to know — without the hype.Wed, 15 Apr 2026 00:00:00 GMTAIAI SecurityThreat LandscapeRisk ManagementThe OAIC Is Done Warning: What Australia's First Privacy Compliance Sweep Means for Your Businesshttps://www.cybercraft.net/blog/oaic-privacy-enforcement-compliance-sweep/https://www.cybercraft.net/blog/oaic-privacy-enforcement-compliance-sweep/Australia's privacy regulator launched its first-ever compliance sweep in January 2026, reviewing 60 businesses across six sectors. With new powers to issue $66,000 infringement notices without going to court, the enforcement era has arrived.Mon, 13 Apr 2026 00:00:00 GMTCyberPrivacyComplianceOAICRisk ManagementThe AI Skills Gap: Why Two-Thirds of Australian SMBs Use AI but Only 5% Are Getting Full Valuehttps://www.cybercraft.net/blog/ai-skills-gap-sme-workforce-australia/https://www.cybercraft.net/blog/ai-skills-gap-sme-workforce-australia/Most Australian small businesses are using AI, but a Deloitte study found just 5% are fully equipped to benefit. The culprit isn't the technology — it's workforce capability.Mon, 30 Mar 2026 00:00:00 GMTAIAI SkillsWorkforceProductivitySMEAustralia's Ransomware Reporting Law Is Now in Enforcement Mode: What Your Business Must Dohttps://www.cybercraft.net/blog/cyber-security-act-ransomware-reporting-obligations/https://www.cybercraft.net/blog/cyber-security-act-ransomware-reporting-obligations/Australia's mandatory ransomware payment reporting law entered active enforcement in January 2026. If your turnover exceeds $3 million, a 72-hour reporting clock is now ticking after any ransom payment.Mon, 23 Mar 2026 00:00:00 GMTCyberRansomwareComplianceCyber Security ActMandatory ReportingThe AI Adoption Gap: Why Most Australian SMEs Are Missing the Productivity Opportunityhttps://www.cybercraft.net/blog/ai-adoption-gap-australian-smes/https://www.cybercraft.net/blog/ai-adoption-gap-australian-smes/Only 37% of Australian SMEs are actively adopting AI, yet businesses that do are seeing up to fourfold productivity gains. Here's what decision-makers need to know about closing the gap.Tue, 10 Mar 2026 00:00:00 GMTAIAI AdoptionProductivitySMERansomware Is Australia's Top Cyber Threat — And the Costs Are Climbing Fasthttps://www.cybercraft.net/blog/ransomware-crisis-australian-businesses/https://www.cybercraft.net/blog/ransomware-crisis-australian-businesses/Ransomware made up 34% of Australia's most damaging cyber incidents last year, with average payments reaching $1.35 million. Here's what your board needs to know.Thu, 05 Mar 2026 00:00:00 GMTCyberRansomwareIncident ResponseRisk ManagementAustralia's National AI Plan: What the New Governance Framework Means for Your Businesshttps://www.cybercraft.net/blog/australia-national-ai-plan-governance/https://www.cybercraft.net/blog/australia-national-ai-plan-governance/Australia launched its National AI Plan in December 2025, introducing new governance frameworks and an AI Safety Institute. Here's what business leaders need to understand about compliance and opportunity.Tue, 24 Feb 2026 00:00:00 GMTAIAI GovernanceComplianceRegulationEssential Eight Compliance: Why 78% of Australian Organisations Are Still Falling Shorthttps://www.cybercraft.net/blog/essential-eight-maturity-compliance/https://www.cybercraft.net/blog/essential-eight-maturity-compliance/Only 22% of assessed entities have reached Maturity Level 2 across all eight strategies. With cyber insurers now demanding E8 compliance, the gap is becoming a business risk.Tue, 10 Feb 2026 00:00:00 GMTCyberEssential EightComplianceCyber InsuranceYour Trusted Vendor Could Be Your Biggest Cyber Risk: Supply Chain Security in 2026https://www.cybercraft.net/blog/supply-chain-security-vendor-risk/https://www.cybercraft.net/blog/supply-chain-security-vendor-risk/State-sponsored actors and criminal groups are increasingly targeting supply chains. With regulators holding companies accountable for vendor security, it's time to rethink third-party risk.Wed, 28 Jan 2026 00:00:00 GMTCyberSupply ChainThird-Party RiskGovernanceAI-Powered Cyber Threats Are Targeting Australian Businesses — Here's What You Need to Knowhttps://www.cybercraft.net/blog/ai-security-threats-australian-businesses/https://www.cybercraft.net/blog/ai-security-threats-australian-businesses/51% of Australian organisations have already encountered AI-powered cyber threats. From deepfake scams to prompt injection attacks, the threat landscape is evolving fast.Thu, 15 Jan 2026 00:00:00 GMTAIAI SecurityThreat LandscapeRisk Management