Microsoft Teams Helpdesk Impersonation Attacks Are Rising. Here’s What Australian IT Teams Should Change This Week

by CPI Staff | Apr 22, 2026 | Blog, Cybersecurity, Email Security, Essential 8, Microsoft 365 Security, Microsoft Teams

A new wave of social engineering attacks is targeting Australian organisations through a channel most IT teams still treat as safe: Microsoft Teams. Threat actors are impersonating internal IT helpdesk staff, reaching users via external Teams chats and federated...

The North Korean Threat Actor Now Targeting macOS Fleets — and Why Your Intune for Mac Baseline Matters

by CPI Staff | Apr 22, 2026 | Blog, Cybersecurity, Essential 8, Microsoft 365 Security, Microsoft defender XDR, Microsoft Intune

For years, Australian IT leaders treated macOS as the “quiet corner” of the fleet. A handful of executives and designers on MacBooks, a sprinkle of engineers, and a general assumption that Apple’s built-in protections were enough. That assumption no...

Microsoft’s Emergency Windows Server Updates Are a Reminder Mid-Market Patch Validation Cannot Be Optional

by CPI Staff | Apr 21, 2026 | Blog, Cybersecurity, Essential 8, Windows Server

Patch deployment failures are not supposed to become operational incidents. But that is exactly what many IT teams were forced to confront after Microsoft’s April 2026 Windows Server security updates triggered installation failures on some Windows Server 2025...

Microsoft’s New Critique Feature Changes How Deep Research Should Be Governed in M365

by CPI Staff | Apr 18, 2026 | AI Governance & Risk Management, Blog, Essential 8, Microsoft 365, Microsoft 365 Security, Microsoft Purview

Microsoft’s Deep Research in Copilot for Microsoft 365 has already reshaped how knowledge workers produce long-form analysis. Teams that used to spend days pulling together market scans, risk reviews, and competitive briefings now have a drafting partner that...

OpenAI Codex Can Now Do Almost Everything. Here’s How Australian CIOs Should Respond

by CPI Staff | Apr 18, 2026 | AI Coding Agents, AI Governance & Risk Management, Blog, Codex, Essential 8, OpenAI

OpenAI Codex has quietly crossed a line that most CIOs haven’t fully registered yet. It’s no longer a code completion tool. It’s a cloud-based software engineering agent that can read a repository, run tests, fix bugs, write features, and open pull...

The Axios Supply Chain Attack Hit OpenAI’s Signing Pipeline. What Every Organisation Should Learn About Dependency Governance

by CPI Staff | Apr 12, 2026 | AI Governance & Risk Management, Blog, Cybersecurity, Essential 8, Software Supply Chain Security

When a North Korean state actor compromised the Axios npm package on March 31, 2026, the blast radius did not stop at developer laptops. It reached OpenAI’s macOS code-signing pipeline — the system that certifies ChatGPT Desktop, Codex, Codex CLI, and Atlas as...