Details have been published of a critical flaw in the programming language PHP, which is the backbone of more than 70% of all websites. Left unfixed, the flaw would allow hackers to easily take over and compromise millions of websites and the information held on their servers. In response, multiple European governments and operators including the Port of Rotterdam have taken websites offline.
Updating WordPress, Drupal or a plugin will not close the PHP flaws that took government websites offline this week. The vulnerable code sits in the PHP engine underneath them, so every server, appliance and hosting platform running PHP has to be found and updated.
Attackers have used a stolen credential from a Microsoft 365 backup service to sign in to hundreds of customer tenants. Because backup tools need broad access to mail, files and directories, the attackers inherited that access.
Data concerns have delayed or derailed AI projects at 86 per cent of organisations in the past 12 months. That is despite 95 per cent naming better use of data to improve business outcomes as a top priority.
A quarter of enterprise security breaches will trace back to AI agent abuse by 2028, Gartner predicts. It blames unmanaged machine privileges and legacy credential practices.
Australian organisations will no longer be able to summarise their cyber security posture with a single Essential Eight maturity level. The Australian Signals Directorate (ASD) has released a principles-based replacement that rates security area by area.
Origin Energy has seen no evidence that customer data taken in its July cyber incident has been published online, but chairman Scott Perkins has told shareholders the risk remains and affected customers must stay alert to scams.
Seventy percent of organisations say less than half their unstructured data is discoverable and usable for analytics or AI, according to new research from analyst firm BARC. The finding lands as enterprises push AI agents into production on top of documents, emails and images they cannot fully see.
Google Cloud has released the Open Knowledge Format, an open specification for the context and curated knowledge that AI agents need to work accurately.
Cybersecurity agencies of Australia, Canada, New Zealand, the United Kingdom and the United States issued a call to action on Monday for cyber defenders. The message was clear: artificial intelligence (AI) is a powerful weapon for cyber attackers; defenders must act urgently to improve their cyber defences.
There is a very real risk the AI revolution could cause an international catastrophe within five years, a panel of 272 experts has found. The experts defined catastrophe as more than one million deaths, more than $ US100 billion in losses, or civilisation-scale damage to democracy or privacy.
A ransomware attack on Australia's second-largest sugar producer has shut two Queensland mills, the latest blow to critical infrastructure as attacks on essential industries climb.
The Australian Signals Directorate (ASD) has opened national consultation on the evolution of the Essential Eight, its flagship cyber security framework.
The Electronic Discovery Reference Model (EDRM) has released version 4.1 of its Information Governance Reference Model (IGRM), the first major revision since 2012. The update arrives as organisations confront AI adoption, expanding privacy obligations and growing pressure to coordinate information decisions across departments.
More than one in 10 enterprises will be AI-first by 2030, outperforming competitors in the adoption of AI agents, semantics and converged data and analytics (D&A) platforms, according to Gartner, Inc.
The Department of Finance has tied staff use of generative artificial intelligence to data classification and recordkeeping rules, in guidance released under Freedom of Information.
The AI agent followed its instructions, optimised the task, and executed flawlessly. Yet in doing so, it set off a chain of decisions that exposed sensitive data, alienated customers, and left executives scrambling to explain an outcome no one had explicitly authorised.
