Hackers have stolen around US$6.3 billion (£4.7 billion) from the cryptocurrency exchange Binance, most of which was taken in under an hour. According to Binance, the attack exploited systems and individuals with the authority to carry out transactions involving such large sums.
Agencies that switch on Microsoft 365 Copilot may need their own controls to meet records obligations. New federal guidance warns the service can influence official work without preserving the prompts, outputs or context behind it.
A Commonwealth contract that banned offshore access to court data did not stop overseas transcribers reaching it. Australia's privacy regulator says the fault lay in an access-control error, not in the contract.
Attackers have begun running intrusions through AI coding assistants already approved on a victim's device. Their commands then inherit the trust the organisation gave the tool.
AI is often discussed in terms of what it might replace. But perhaps we’re asking the wrong question. What if its real value is not replacing human expertise, but extending what skilled people are capable of?
Organisations now have days, and sometimes only hours, to patch new vulnerabilities before AI-assisted attackers exploit them, Australia's cyber security agency has warned.
An AI planning assistant used by New South Wales councils has handled more than 16,500 resident conversations in nine months. About a third took place outside council counter hours.
UNSW Sydney will retire 11 legacy research storage systems and replace them with a single environment that moves data automatically between fast and cheap storage. The university has selected US storage company DDN as prime contractor after an 18-month evaluation. Melbourne-founded Arcitecta will supply the data management layer.
Updating WordPress, Drupal or a plugin will not close the PHP flaws that took government websites offline this week. The vulnerable code sits in the PHP engine underneath them, so every server, appliance and hosting platform running PHP has to be found and updated.
Attackers have used a stolen credential from a Microsoft 365 backup service to sign in to hundreds of customer tenants. Because backup tools need broad access to mail, files and directories, the attackers inherited that access.
Data concerns have delayed or derailed AI projects at 86 per cent of organisations in the past 12 months. That is despite 95 per cent naming better use of data to improve business outcomes as a top priority.
A quarter of enterprise security breaches will trace back to AI agent abuse by 2028, Gartner predicts. It blames unmanaged machine privileges and legacy credential practices.
Details have been published of a critical flaw in the programming language PHP, which is the backbone of more than 70% of all websites. Left unfixed, the flaw would allow hackers to easily take over and compromise millions of websites and the information held on their servers. In response, multiple European governments and operators including the Port of Rotterdam have taken websites offline.
Australian organisations will no longer be able to summarise their cyber security posture with a single Essential Eight maturity level. The Australian Signals Directorate (ASD) has released a principles-based replacement that rates security area by area.
Origin Energy has seen no evidence that customer data taken in its July cyber incident has been published online, but chairman Scott Perkins has told shareholders the risk remains and affected customers must stay alert to scams.
Financial services licensees are answerable for the cyber resilience of their authorised representatives, not just their own systems. Fortnum Private Wealth has been ordered to pay a $A1.35 million penalty for failing to manage cyber risk across its advice network.
