attack-surface 1 Reduce what the internet can reach: a practical response to ASD’s AI guidance Oct 28, 2026