Details have been published of a critical flaw in the programming language PHP, which is the backbone of more than 70% of all websites. Left unfixed, the flaw would allow hackers to easily take over and compromise millions of websites and the information held on their servers. In response, multiple European governments and operators including the Port of Rotterdam have taken websites offline.
Updating WordPress, Drupal or a plugin will not close the PHP flaws that took government websites offline this week. The vulnerable code sits in the PHP engine underneath them, so every server, appliance and hosting platform running PHP has to be found and updated.
Attackers have used a stolen credential from a Microsoft 365 backup service to sign in to hundreds of customer tenants. Because backup tools need broad access to mail, files and directories, the attackers inherited that access.
Data concerns have delayed or derailed AI projects at 86 per cent of organisations in the past 12 months. That is despite 95 per cent naming better use of data to improve business outcomes as a top priority.
A quarter of enterprise security breaches will trace back to AI agent abuse by 2028, Gartner predicts. It blames unmanaged machine privileges and legacy credential practices.
Australian organisations will no longer be able to summarise their cyber security posture with a single Essential Eight maturity level. The Australian Signals Directorate (ASD) has released a principles-based replacement that rates security area by area.
Origin Energy has seen no evidence that customer data taken in its July cyber incident has been published online, but chairman Scott Perkins has told shareholders the risk remains and affected customers must stay alert to scams.
Global advisory firm FTI Consulting has responded to rising client demand by appointing a dedicated Australia leader for its Information Governance, Privacy and Security practice.
SAP has agreed to acquire Dremio, an open-source data lakehouse platform, in a bid to solve the data fragmentation problem that the enterprise software giant says is the primary reason AI initiatives fail in large organisations. Financial terms were not disclosed.
APRA has told banks, insurers and superannuation trustees that governance, risk management and operational resilience practices are failing to keep pace with the speed and complexity of AI adoption - and has threatened enforcement action against entities that do not address the gaps.
New Zealand law firm Buddle Findlay has warned that Kiwi businesses that hold or handle the personal information of individuals in Australia must prepare for strict new transparency rules regarding automated decision-making.
As enterprises accelerate deployment of agentic AI systems, Automation Anywhere has published a framework arguing that conventional sovereign AI approaches - focused primarily on data storage location - are insufficient for workflows where AI agents actively execute tasks across multiple systems and jurisdictions.
Gartner predicts that by 2028, an average global Fortune 500 enterprise will have over 150,000 agents in use, up from less than 15 in 2025, generating significant agent sprawl, IT complexity and management challenges.
Medical device manufacturer Medtronic has confirmed that an unauthorised party accessed data within its corporate IT systems, triggering incident response protocols and an ongoing investigation into the scope of the breach.
Australia Post has partnered with AI security firm Alpha Level to apply machine learning to cyber threat detection across its national network - including systems used by thousands of licensed post offices and small businesses.
A Harvard Business Review Analytic Services study has found that while 94% of organisations recognise connected data and workflows as critical to AI success, fewer than one in three say their systems are actually well connected today.
A NSW Treasury employee has been arrested and charged over the alleged theft of more than 5,600 sensitive government documents in what the state government has declared a significant cyber incident.
