Details have been published of a critical flaw in the programming language PHP, which is the backbone of more than 70% of all websites. Left unfixed, the flaw would allow hackers to easily take over and compromise millions of websites and the information held on their servers. In response, multiple European governments and operators including the Port of Rotterdam have taken websites offline.
Updating WordPress, Drupal or a plugin will not close the PHP flaws that took government websites offline this week. The vulnerable code sits in the PHP engine underneath them, so every server, appliance and hosting platform running PHP has to be found and updated.
Attackers have used a stolen credential from a Microsoft 365 backup service to sign in to hundreds of customer tenants. Because backup tools need broad access to mail, files and directories, the attackers inherited that access.
Data concerns have delayed or derailed AI projects at 86 per cent of organisations in the past 12 months. That is despite 95 per cent naming better use of data to improve business outcomes as a top priority.
A quarter of enterprise security breaches will trace back to AI agent abuse by 2028, Gartner predicts. It blames unmanaged machine privileges and legacy credential practices.
Australian organisations will no longer be able to summarise their cyber security posture with a single Essential Eight maturity level. The Australian Signals Directorate (ASD) has released a principles-based replacement that rates security area by area.
Origin Energy has seen no evidence that customer data taken in its July cyber incident has been published online, but chairman Scott Perkins has told shareholders the risk remains and affected customers must stay alert to scams.
The financial services industry has become the most targeted by network-layer distributed denial-of-service (DDoS) attacks, new Akamai research has found.
ANZ organisations are reshaping resilience strategies as AI agents widen the attack surface, AvePoint ANZ Managing Director Max McNamara told a Sydney Gartner audience.
Australia's privacy regulator has opened consultation on guidance for new transparency rules. The rules will force organisations to disclose how they use automated decision-making (ADM) systems.
New Zealand’s Privacy Commissioner has found both a major private patient portal vendor and the country’s central public health agency in breach of patient privacy laws, following a December 2025 cyber incident that exposed the sensitive records of nearly 100,000 people.
A terabit-scale DDoS attack took Australia’s largest privately-owned Web host offline on Saturday 23 May. The takedown has laid bare a regulatory gap that forces enterprise and government customers to fund the country’s DDoS defences themselves.
The Australian Digital Health Agency (ADHA) concedes adoption of standards remains “sporadic” more than two decades after foundational digital health work began in Australia but claims a new framework will drive uptake.
Most organisations are accelerating artificial intelligence investment without the data foundations needed to support it, a global benchmark study has found.
More than half of enterprise AI projects are failing to deliver their objectives, with poor unstructured data management identified as the primary blocker, new Nasuni research has found.
The Albanese government's pre-election commitments to open government and transparency appear not to have made it through to key federal portfolios, which are failing the pro-disclosure obligations of the Freedom of Information Act according to the Australian National Audit Office (ANAO).
