Section
Cybersecurity
PeopleSoft zero-day hit 100 organisations, Mandiant says
PeopleSoft zero-day CVE-2026-35273 was exploited for two weeks before disclosure, with universities making up most victims.
PeopleSoft zero-day hit 100 organisations, Mandiant says
PeopleSoft zero-day CVE-2026-35273 was exploited for two weeks before disclosure, with universities making up most victims.
Google Gemini scam lawsuit targets China phishing ring
Google Gemini scam lawsuit alleges a China-based network used AI to scale fake sites, scam texts and phishing links aimed at Android users.
Mackay Sugar cyberattack halts Queensland cane harvest
A cyberattack has forced Mackay Sugar to halt cane crushing at two Queensland mills, affecting about 1,300 family farms at the start of the harvest season.
OpenAI Lockdown Mode targets ChatGPT prompt injection
OpenAI Lockdown Mode limits ChatGPT web and connector features to reduce prompt-injection data leaks, but it is not a complete fix.
What is BitLocker? Windows encryption in 2026
BitLocker 2026 protects Windows laptop data with disk encryption, but recovery keys and Windows editions decide how it works.
Chinese authority scams cost Australians $12m in 2025
Chinese authority scams cost Australians more than $12m in 2025, with fake police calls, forged warrants and bank alerts in focus.
Anthropic Mythos used by NSA for cyber work after AU rollout
Anthropic Mythos is being used by the NSA for cyber operations as the AI lab expands controlled access to Australian defenders.
IBM, AT&T foreign hacks claim tests disclosure rules
IBM, AT&T foreign hacks allegations raise disclosure questions after a former IBM cyber executive said intrusions were hidden from the US government.
Meta AI chatbot hack exposed Instagram recovery flaw
Meta AI chatbot hack reports show attackers abused Instagram account recovery, forcing Meta to patch an AI support workflow.
Iran AI cyber attacks: ChatGPT misuse is now real
Iran AI cyber attacks show how ChatGPT and Gemini can lower the skill barrier for malware, phishing and sanctions evasion.
ChatGPT Google Sheets flaw exposes workbook data
ChatGPT Google Sheets flaw disclosed by PromptArmor could let one poisoned sheet leak workbook data and show phishing overlays.
Microsoft zero-day threat sparks researcher backlash
Microsoft zero-day disclosures have triggered backlash after legal threats to a researcher, with six Windows flaws at the centre of the dispute.
Zscaler stock sinks on soft outlook and sales reset
Zscaler stock sank 31 per cent after softer guidance and sales turnover, raising fresh questions about cyber budgets and enterprise deal flow.
Starlette flaw exposes AI agent services to auth bypass
A Starlette flaw tied to malformed Host headers can bypass path-based checks, pushing FastAPI and AI-agent teams to patch to version 1.0.1.
myGov passkey explained: how it works and when to use one
myGov passkeys let Australians sign in with a fingerprint, face scan or device PIN instead of a password. Here's how setup works.
VeroGuard rescue after $55m collapse raises questions for buyers
VeroGuard's rescue from liquidation after a $55 million collapse keeps the cyber supplier alive but leaves open questions over ownership, support and public backing.
Steggall says WhatsApp account hit in suspected foreign-state phishing attack
Zali Steggall said her WhatsApp account was compromised in a March phishing attack that parliamentary officials linked to a suspected foreign state actor.
Cybersecurity jobs rise as AI-generated code widens risk
Cybersecurity jobs are rising as AI-generated code and shadow AI add validation, governance and breach-response work for enterprise teams.
Anthropic Mythos flaws put patch speed at the centre
Anthropic Mythos found more than 10,000 serious flaws in a month, putting patch cycles, triage and change control at the centre of software security.
ASX 200 infostealer infections are now a board risk
ASX 200 infostealer infections are exposing how stolen credentials and shared suppliers can turn a solid cyber score into real board risk.
Device code phishing surges as ASD warns Microsoft 365 users
Device code phishing is targeting Australian Microsoft 365 users, the ASD has warned, as Proofpoint tracks a surge in criminal toolkits and phishing-as-a-service platforms.
Google publishes Chromium exploit code before patch lands
Chromium exploit code was published before a fix was broadly available, raising short-term risk for Chrome and other browsers built on Google's engine.
GitHub breach exposes 3,800 repos in VS Code attack
GitHub breach exposed about 3,800 internal repositories after a poisoned VS Code extension hit one employee device, widening supply-chain concerns.
Claude Code sandbox bypass patched after 130 releases
Anthropic patched a Claude Code sandbox bypass affecting about 130 releases, showing how AI coding tools can expose developer workstations.