Section
Cybersecurity
OpenAI Lockdown Mode targets ChatGPT prompt injection
OpenAI Lockdown Mode limits ChatGPT web and connector features to reduce prompt-injection data leaks, but it is not a complete fix.
What is BitLocker? Windows encryption in 2026
BitLocker 2026 protects Windows laptop data with disk encryption, but recovery keys and Windows editions decide how it works.
Chinese authority scams cost Australians $12m in 2025
Chinese authority scams cost Australians more than $12m in 2025, with fake police calls, forged warrants and bank alerts in focus.
IBM, AT&T foreign hacks claim tests disclosure rules
IBM, AT&T foreign hacks allegations raise disclosure questions after a former IBM cyber executive said intrusions were hidden from the US government.
Anthropic Mythos used by NSA for cyber work after AU rollout
Anthropic Mythos is being used by the NSA for cyber operations as the AI lab expands controlled access to Australian defenders.
Meta AI chatbot hack exposed Instagram recovery flaw
Meta AI chatbot hack reports show attackers abused Instagram account recovery, forcing Meta to patch an AI support workflow.
Iran AI cyber attacks: ChatGPT misuse is now real
Iran AI cyber attacks show how ChatGPT and Gemini can lower the skill barrier for malware, phishing and sanctions evasion.
ChatGPT Google Sheets flaw exposes workbook data
ChatGPT Google Sheets flaw disclosed by PromptArmor could let one poisoned sheet leak workbook data and show phishing overlays.
Microsoft zero-day threat sparks researcher backlash
Microsoft zero-day disclosures have triggered backlash after legal threats to a researcher, with six Windows flaws at the centre of the dispute.
Zscaler stock sinks on soft outlook and sales reset
Zscaler stock sank 31 per cent after softer guidance and sales turnover, raising fresh questions about cyber budgets and enterprise deal flow.
Starlette flaw exposes AI agent services to auth bypass
A Starlette flaw tied to malformed Host headers can bypass path-based checks, pushing FastAPI and AI-agent teams to patch to version 1.0.1.
myGov passkey explained: how it works and when to use one
myGov passkeys let Australians sign in with a fingerprint, face scan or device PIN instead of a password. Here's how setup works.
VeroGuard rescue after $55m collapse raises questions for buyers
VeroGuard's rescue from liquidation after a $55 million collapse keeps the cyber supplier alive but leaves open questions over ownership, support and public backing.
Steggall says WhatsApp account hit in suspected foreign-state phishing attack
Zali Steggall said her WhatsApp account was compromised in a March phishing attack that parliamentary officials linked to a suspected foreign state actor.
Cybersecurity jobs rise as AI-generated code widens risk
Cybersecurity jobs are rising as AI-generated code and shadow AI add validation, governance and breach-response work for enterprise teams.
Anthropic Mythos flaws put patch speed at the centre
Anthropic Mythos found more than 10,000 serious flaws in a month, putting patch cycles, triage and change control at the centre of software security.
ASX 200 infostealer infections are now a board risk
ASX 200 infostealer infections are exposing how stolen credentials and shared suppliers can turn a solid cyber score into real board risk.
Google publishes Chromium exploit code before patch lands
Chromium exploit code was published before a fix was broadly available, raising short-term risk for Chrome and other browsers built on Google's engine.
Device code phishing surges as ASD warns Microsoft 365 users
Device code phishing is targeting Australian Microsoft 365 users, the ASD has warned, as Proofpoint tracks a surge in criminal toolkits and phishing-as-a-service platforms.
Claude Code sandbox bypass patched after 130 releases
Anthropic patched a Claude Code sandbox bypass affecting about 130 releases, showing how AI coding tools can expose developer workstations.
GitHub breach exposes 3,800 repos in VS Code attack
GitHub breach exposed about 3,800 internal repositories after a poisoned VS Code extension hit one employee device, widening supply-chain concerns.
EY cyber report retracted after AI citation errors
EY pulled a cybersecurity report after GPTZero found more than 70 per cent of its 27 citations were AI-generated, invented or misattributed.
OpenAI Daybreak: CBA, Westpac test cyber defences
OpenAI Daybreak is being tested by Commonwealth Bank and Westpac, bringing agentic cyber defence tools into Australian banking workflows.
Developer workstations are the new supply-chain weak link
Developer workstations are emerging as the new supply-chain weak link as attackers pivot from package registries to laptops, tokens and CI access.
Baidam and AUSCERT sign 12-month cyber pact on threat sharing
Baidam and AUSCERT have signed a 12-month pact covering threat intelligence, incident response, phishing takedowns and training for Australian organisations.
