Details have been published of a critical flaw in the programming language PHP, which is the backbone of more than 70% of all websites. Left unfixed, the flaw would allow hackers to easily take over and compromise millions of websites and the information held on their servers. In response, multiple European governments and operators including the Port of Rotterdam have taken websites offline.
Updating WordPress, Drupal or a plugin will not close the PHP flaws that took government websites offline this week. The vulnerable code sits in the PHP engine underneath them, so every server, appliance and hosting platform running PHP has to be found and updated.
Attackers have used a stolen credential from a Microsoft 365 backup service to sign in to hundreds of customer tenants. Because backup tools need broad access to mail, files and directories, the attackers inherited that access.
Data concerns have delayed or derailed AI projects at 86 per cent of organisations in the past 12 months. That is despite 95 per cent naming better use of data to improve business outcomes as a top priority.
A quarter of enterprise security breaches will trace back to AI agent abuse by 2028, Gartner predicts. It blames unmanaged machine privileges and legacy credential practices.
Australian organisations will no longer be able to summarise their cyber security posture with a single Essential Eight maturity level. The Australian Signals Directorate (ASD) has released a principles-based replacement that rates security area by area.
Origin Energy has seen no evidence that customer data taken in its July cyber incident has been published online, but chairman Scott Perkins has told shareholders the risk remains and affected customers must stay alert to scams.
Victoria Police is taking an average of nine months to process Freedom of Information requests – unchanged since at least 2022, when it was attributed to COVID-19.
Organisations that achieve positive AI outcomes invest up to four times more in data quality, governance, and workforce preparation than those with poor AI results, according to new research from Gartner.
A detailed guide clarifying how AI systems should process PDF documents has been published by The PDF Association. The FAQ warns that common ingestion practices risk information loss and hallucinations.
Singapore has put forward a proposed international standard, ISO/IEC 42119-8, that would set standardised testing approaches for generative AI systems, including benchmarking and red teaming methodologies.
No Australian or New Zealand organisation features among the roughly 50 partners granted access to Project Glasswing, Anthropic's landmark AI-driven cybersecurity initiative. Now a rival model from OpenAI has entered the field, with a broader access pathway that may offer ANZ security professionals a more realistic route to frontier AI defensive tooling.
Christchurch City Council has issued a Request for Information (RFI) seeking vendors to deliver a Microsoft 365-based Electronic Document and Records Management System (EDRMS) to replace its existing on-premise TRIM platform.
A global survey of 5,000 IT and security leaders has found that just 5% say both they and their organisation have full trust in their cybersecurity vendors - raising serious questions for CISOs, risk managers and boards about how they evaluate and manage vendor relationships.
New, more powerful artificial intelligence (AI) models are announced pretty regularly these days: the latest version of ChatGPT or Claude or Gemini always has new features and new capabilities that its makers are eager for customers to try out. But now Anthropic has announced a new model with great fanfare, but is only giving access to a select handful of users. In what the New York Times calls a “terrifying warning sign” of the model’s power, the company has instead started an initiative called Project Glasswing to use the model for good instead of evil.
Three years into the generative AI era, most enterprises are failing to convert growing investment and adoption into measurable business impact, according to new research from Forrester.
