Details have been published of a critical flaw in the programming language PHP, which is the backbone of more than 70% of all websites. Left unfixed, the flaw would allow hackers to easily take over and compromise millions of websites and the information held on their servers. In response, multiple European governments and operators including the Port of Rotterdam have taken websites offline.
Updating WordPress, Drupal or a plugin will not close the PHP flaws that took government websites offline this week. The vulnerable code sits in the PHP engine underneath them, so every server, appliance and hosting platform running PHP has to be found and updated.
Attackers have used a stolen credential from a Microsoft 365 backup service to sign in to hundreds of customer tenants. Because backup tools need broad access to mail, files and directories, the attackers inherited that access.
Data concerns have delayed or derailed AI projects at 86 per cent of organisations in the past 12 months. That is despite 95 per cent naming better use of data to improve business outcomes as a top priority.
A quarter of enterprise security breaches will trace back to AI agent abuse by 2028, Gartner predicts. It blames unmanaged machine privileges and legacy credential practices.
Australian organisations will no longer be able to summarise their cyber security posture with a single Essential Eight maturity level. The Australian Signals Directorate (ASD) has released a principles-based replacement that rates security area by area.
Origin Energy has seen no evidence that customer data taken in its July cyber incident has been published online, but chairman Scott Perkins has told shareholders the risk remains and affected customers must stay alert to scams.
A purge of legacy systems across Australia’s federal government would likely cost billions and remains unlikely. Still, the OpenAI Medicare breach has prompted an immediate stocktake of the outdated technology agencies run.
Nearly nine in ten senior executives believe a data sovereignty failure could cost them their jobs. Yet almost two thirds of their organisations have no formal sovereignty strategy, new global research shows.
Free market enthusiasts have long argued that private industry does things more efficiently than government. New research into data breach notifications in Australia provides a stark illustration.
Always-on AI agents that run on their own cloud computer are rolling out in ChatGPT. In organisations, they can be issued their own identity and credentials.
Australia’s Medicare system manages health and medical data for over 27 million people. So it makes sense there has been widespread shock at the news it was hacked by an OpenAI agent in June.
New Zealand's Privacy Commissioner has used compliance notices to dictate how a health agency must vet, contract with and monitor providers holding patient data. The move follows a breach affecting around 99,416 people.
Suncorp is projecting annual savings of 68,000 hours of manual effort after using AI to classify and name workers compensation claim documents. Daily document naming corrections have fallen by around 45%.
FOI refusals on workload grounds are more likely to hold up when the agency's estimate is itemised, sampled and tied to the records' real complexity. That is the lesson of 'BBP' and Department of Foreign Affairs and Trade (Freedom of Information) [2026] AICmr 74, according to law firm Holding Redlich.
Australian AI cloud provider Sharon AI plans to host frontier AI models onshore, next to customers' sensitive data. It will use a new confidential computing capability from VAST Data.
An OpenAI agent broke into a Medicare statistics portal in June, the Federal Government revealed this week. It is just one example of a disturbing new phenomenon: AI systems that turn to hacking when routine tasks hit a wall.
