Details have been published of a critical flaw in the programming language PHP, which is the backbone of more than 70% of all websites. Left unfixed, the flaw would allow hackers to easily take over and compromise millions of websites and the information held on their servers. In response, multiple European governments and operators including the Port of Rotterdam have taken websites offline.
Updating WordPress, Drupal or a plugin will not close the PHP flaws that took government websites offline this week. The vulnerable code sits in the PHP engine underneath them, so every server, appliance and hosting platform running PHP has to be found and updated.
Attackers have used a stolen credential from a Microsoft 365 backup service to sign in to hundreds of customer tenants. Because backup tools need broad access to mail, files and directories, the attackers inherited that access.
Data concerns have delayed or derailed AI projects at 86 per cent of organisations in the past 12 months. That is despite 95 per cent naming better use of data to improve business outcomes as a top priority.
A quarter of enterprise security breaches will trace back to AI agent abuse by 2028, Gartner predicts. It blames unmanaged machine privileges and legacy credential practices.
Australian organisations will no longer be able to summarise their cyber security posture with a single Essential Eight maturity level. The Australian Signals Directorate (ASD) has released a principles-based replacement that rates security area by area.
Origin Energy has seen no evidence that customer data taken in its July cyber incident has been published online, but chairman Scott Perkins has told shareholders the risk remains and affected customers must stay alert to scams.
Artificial intelligence (AI) giant Anthropic has expanded access to a highly advanced model deemed too dangerous for public release, including Australia in the select handful of users. The large language model, known as Claude Mythos, is now being rolled out to an additional 150 organisations across 15 countries, including the Australian government and several local businesses, as part of Project Glasswing.
All 10 public universities in New South Wales have deficiencies in their IT and cyber security controls, the NSW Auditor-General has found, with weak management of legacy systems leaving the sector exposed to data breaches and system failures.
Stolen healthcare data is being traded through a mature global underground economy spanning ransomware groups, access brokers and fraud marketplaces, new TrendAI research reveals.
The Australian Government has signed its second Memorandum of Understanding with Microsoft in seven weeks, this time covering cyber security, secure cloud and critical infrastructure resilience.
Nearly 80% of enterprise IT leaders say limited data access is constraining their AI and data initiatives, despite most organisations reporting active AI integration across core business processes, according to a new Cloudera survey.
Ask most people what Knowledge Management means and they'll mention a chatbot. Or a FAQ database. Or the system the contact centre uses to answer customer calls faster. They're not wrong. That is KM. But it's one room in a very large house. And while everyone's focused on that room, the rest of the house is quietly falling apart.
The regulatory gap that allows compromised Australian home devices to be weaponised in large-scale distributed denial-of-service (DDOS) attacks will remain open for the foreseeable future.
Neglecting semantics will cause AI agents to be inaccurate and inefficient, exposing organizations to wasted spending and increased data and AI governance vulnerabilities, said Gartner, Inc.
Artificial intelligence, post-quantum cryptography and the proliferation of non-human digital identities are driving a fundamental shift in enterprise cybersecurity risk, according to a new report by KPMG International. The Cybersecurity Considerations 2026 report - drawing on insights from more than 20 KPMG cyber experts and senior leaders from Google, Microsoft, Palo Alto Networks, and ServiceNow - identifies eight priority areas demanding urgent attention from enterprise security leaders.
Anthropic has expanded Project Glasswing, its AI-powered cybersecurity vulnerability program, to approximately 150 new organisations across more than 15 countries - with Australia and New Zealand among the nations included in the second cohort, according to reporting by the Financial Times. Anthropic has not publicly confirmed the country list.
