Details have been published of a critical flaw in the programming language PHP, which is the backbone of more than 70% of all websites. Left unfixed, the flaw would allow hackers to easily take over and compromise millions of websites and the information held on their servers. In response, multiple European governments and operators including the Port of Rotterdam have taken websites offline.
Updating WordPress, Drupal or a plugin will not close the PHP flaws that took government websites offline this week. The vulnerable code sits in the PHP engine underneath them, so every server, appliance and hosting platform running PHP has to be found and updated.
Attackers have used a stolen credential from a Microsoft 365 backup service to sign in to hundreds of customer tenants. Because backup tools need broad access to mail, files and directories, the attackers inherited that access.
Data concerns have delayed or derailed AI projects at 86 per cent of organisations in the past 12 months. That is despite 95 per cent naming better use of data to improve business outcomes as a top priority.
A quarter of enterprise security breaches will trace back to AI agent abuse by 2028, Gartner predicts. It blames unmanaged machine privileges and legacy credential practices.
Australian organisations will no longer be able to summarise their cyber security posture with a single Essential Eight maturity level. The Australian Signals Directorate (ASD) has released a principles-based replacement that rates security area by area.
Origin Energy has seen no evidence that customer data taken in its July cyber incident has been published online, but chairman Scott Perkins has told shareholders the risk remains and affected customers must stay alert to scams.
Sixty per cent of Australian workers have personally spotted an error made by an AI tool at work. Almost half say the most significant error they saw had consequences beyond minor inconvenience, including financial, compliance or reputational impact.
Copilot will be able to read, organise and change files on Windows PCs with user permission, under a Microsoft plan to split AI work between the device and the cloud.
An internal AI agent at Bunnings has saved staff half a million hours of administrative work, according to Google, as parent company Wesfarmers deploys agents across its retail portfolio. The figure was cited at Google Cloud's Gemini at Work 2026 event, where the company announced the Gemini agent, a single agent for knowledge work, content creation and coding.
The NSW Audit Office is building a central platform to collect general ledger, journal and payroll data directly from state agencies. Around 180 agencies are due to be onboarded by 30 June 2027.
Customer requests made by voice or chat could soon flow straight through to back-office execution on a single agentic automation platform. Automation Anywhere has signed a definitive agreement to acquire Boost.ai, an enterprise conversational and voice AI company, from Nordic Capital.
Working out exactly what personal information was exposed in a data breach, and whose, is the slow middle step of incident response. Epiq has bought a platform built to automate it.
Agents that work out which AI regulations and standards apply to a system, then test whether its controls work, are coming to Collibra's governance platform, following the acquisition of trail ML, a Munich-based company founded in 2023.
ANZ organisations whose AI projects are stalled by data problems can now buy records governance design and enforcement technology as one package. Sydney-based data governance vendor RecordPoint has signed records and information management consultancy Informotion as a delivery partner across both countries.
More than half of organisations have no defined way to limit what AI agents can access, or simply give agents the same access as humans. Gartner says chief information security officers (CISOs) should now treat every frontier AI deployment as an insider risk.
Phishing emails are now carrying two attacks in one message. One targets the person reading the email; the other targets the AI assistant that summarises, prioritises or acts on it.
