Details have been published of a critical flaw in the programming language PHP, which is the backbone of more than 70% of all websites. Left unfixed, the flaw would allow hackers to easily take over and compromise millions of websites and the information held on their servers. In response, multiple European governments and operators including the Port of Rotterdam have taken websites offline.
Updating WordPress, Drupal or a plugin will not close the PHP flaws that took government websites offline this week. The vulnerable code sits in the PHP engine underneath them, so every server, appliance and hosting platform running PHP has to be found and updated.
Attackers have used a stolen credential from a Microsoft 365 backup service to sign in to hundreds of customer tenants. Because backup tools need broad access to mail, files and directories, the attackers inherited that access.
Data concerns have delayed or derailed AI projects at 86 per cent of organisations in the past 12 months. That is despite 95 per cent naming better use of data to improve business outcomes as a top priority.
A quarter of enterprise security breaches will trace back to AI agent abuse by 2028, Gartner predicts. It blames unmanaged machine privileges and legacy credential practices.
Australian organisations will no longer be able to summarise their cyber security posture with a single Essential Eight maturity level. The Australian Signals Directorate (ASD) has released a principles-based replacement that rates security area by area.
Origin Energy has seen no evidence that customer data taken in its July cyber incident has been published online, but chairman Scott Perkins has told shareholders the risk remains and affected customers must stay alert to scams.
More than half of successful messaging scams are completed within 30 minutes of first contact, and one in seven is over in less than five minutes, according to a new Kaspersky investigation into the global messaging scam economy. The average loss per victim is US$733.
Most enterprises are locked into AI systems they cannot easily change, and the overwhelming majority do not fully understand their own AI dependencies, a new global study warns. The findings elevate AI sovereignty from a technical concern to a business continuity issue.
Nearly three-quarters of large enterprises use AI regularly or across most business processes, but only 10 per cent say AI is core to how their business operates, a global survey has found. The gap suggests adoption is no longer the challenge - organisational transformation is.
Law firms risk a crisis of 'cognitive surrender' as lawyers treat artificial intelligence as a definitive authority rather than a tool, a new behavioural science study warns. The research finds machine dependence is impairing professional judgment, particularly among junior lawyers using automation for routine work.
Up to half of enterprise data team capacity in Australia and Singapore is consumed by single-use data work that will never be reused, new research from Quest Software has found. The study describes the pattern as a 'hidden tax' on capacity at the moment organisations most need it for AI initiatives.
RACQ has signed a five-year partnership with Adobe and Deloitte Digital to transform how it serves more than 1.7 million members. The deal uses a flexible “Lighthouse” model that gives RACQ early access to Adobe’s latest AI tools. Adobe says it is the first such arrangement in Asia Pacific and Japan.
Employees and customers increasingly encounter AI-generated content via emails, chatbot responses, learning materials, and documents. But enterprises have no way to know how that content, also known as unstructured data, is performing. To improve content over time, it makes sense to observe the human reactions to it. Is it clear? Is it trustworthy? Is it driving the desired actions?
John Edwards, the New Zealand-born former privacy regulator, has resigned as UK Information Commissioner after a workplace investigation into his conduct toward staff.
The Australian Privacy Commissioner has found two health service providers breached privacy law by collecting sensitive health information through third-party tracking pixels without consent.
New Zealand telco One NZ has credited a new deployment of UiPath Maestro as a victory over the challenge of transforming legacy-heavy operations at scale without a costly infrastructure overhaul.
