Details have been published of a critical flaw in the programming language PHP, which is the backbone of more than 70% of all websites. Left unfixed, the flaw would allow hackers to easily take over and compromise millions of websites and the information held on their servers. In response, multiple European governments and operators including the Port of Rotterdam have taken websites offline.
Updating WordPress, Drupal or a plugin will not close the PHP flaws that took government websites offline this week. The vulnerable code sits in the PHP engine underneath them, so every server, appliance and hosting platform running PHP has to be found and updated.
Attackers have used a stolen credential from a Microsoft 365 backup service to sign in to hundreds of customer tenants. Because backup tools need broad access to mail, files and directories, the attackers inherited that access.
Data concerns have delayed or derailed AI projects at 86 per cent of organisations in the past 12 months. That is despite 95 per cent naming better use of data to improve business outcomes as a top priority.
A quarter of enterprise security breaches will trace back to AI agent abuse by 2028, Gartner predicts. It blames unmanaged machine privileges and legacy credential practices.
Australian organisations will no longer be able to summarise their cyber security posture with a single Essential Eight maturity level. The Australian Signals Directorate (ASD) has released a principles-based replacement that rates security area by area.
Origin Energy has seen no evidence that customer data taken in its July cyber incident has been published online, but chairman Scott Perkins has told shareholders the risk remains and affected customers must stay alert to scams.
For twenty years, the logical structure inside a tagged PDF had essentially one constituency: assistive technology, and the accessibility teams obliged to serve it. Then the primary reader of the world’s PDFs quietly stopped being human.
The June 2026 edition of Australia’s Information Security Manual represents a quiet but important shift in how artificial intelligence is treated within cyber security.
Fewer NSW public offices can produce a complete view of their highest risk records than could two years ago. Overall record-keeping compliance across the state still edged upwards.
Knowledge management is the second most common place in the enterprise where AI agents have reached the scaling phase. Only IT ranks higher, and the gap between them is a single percentage point.
All 10 NSW government agencies examined for their use of artificial intelligence keep an AI register. But only four of them record the AI they have formally assessed. The rest of their AI use sits outside any inventory.
A NSW government insurer is asking the market how it could collapse four separate document repositories into one. It has also put a number on what it expects to save. The target is a 20 to 30 per cent reduction in annual licensing and maintenance costs.
New Zealand's central digital agency has been told to stop delivering projects and start setting standards. It has also been told to open a direct channel to Australia's Digital Transformation Agency and import models that already work. Trans-Tasman sourcing and security collaboration are named as joint opportunities to explore.
AI systems in the average large organisation can reach just 45 per cent of company data. In financial services that figure falls to 33 per cent, and in healthcare to 40 per cent. The numbers come from Scaling AI Agents with Trustworthy Data, an MIT Technology Review Insights report sponsored by Google Cloud. It draws on a global survey of 300 senior executives.
A breach has exposed the names, employing organisations and work email addresses of more than 100,000 UK police and criminal justice staff. It appears to have required no malware and no zero-day. A misconfigured permission on a public-facing web portal is the reported cause.
A digital signer can clear identity verification at the start of a remote witnessing session and be replaced before the document is executed. Secured Signing has released the ID Trust Console, which re-tests the person on screen throughout a video signing meeting rather than once at the door.
