Details have been published of a critical flaw in the programming language PHP, which is the backbone of more than 70% of all websites. Left unfixed, the flaw would allow hackers to easily take over and compromise millions of websites and the information held on their servers. In response, multiple European governments and operators including the Port of Rotterdam have taken websites offline.
Updating WordPress, Drupal or a plugin will not close the PHP flaws that took government websites offline this week. The vulnerable code sits in the PHP engine underneath them, so every server, appliance and hosting platform running PHP has to be found and updated.
Attackers have used a stolen credential from a Microsoft 365 backup service to sign in to hundreds of customer tenants. Because backup tools need broad access to mail, files and directories, the attackers inherited that access.
Data concerns have delayed or derailed AI projects at 86 per cent of organisations in the past 12 months. That is despite 95 per cent naming better use of data to improve business outcomes as a top priority.
A quarter of enterprise security breaches will trace back to AI agent abuse by 2028, Gartner predicts. It blames unmanaged machine privileges and legacy credential practices.
Australian organisations will no longer be able to summarise their cyber security posture with a single Essential Eight maturity level. The Australian Signals Directorate (ASD) has released a principles-based replacement that rates security area by area.
Origin Energy has seen no evidence that customer data taken in its July cyber incident has been published online, but chairman Scott Perkins has told shareholders the risk remains and affected customers must stay alert to scams.
With three major regulatory expansions landing on its desk in the next 13 months, the Office of the Australian Information Commissioner (OAIC) has suffered a funding cut in the 2026 federal budget
Informotion has acquired the InTouch product suite from InReach Software, taking ownership of a long-running web and mobile interface designed to extend OpenText Content Manager by enhancing the user experience and increasing productivity gains.
Instructure has confirmed it reached an agreement with the criminal actor behind the Canvas data breach affecting education institutions across the globe.
Artificial intelligence is now embedded almost everywhere in business, but the returns and the guardrails are not keeping pace, according to new research from professional association ISACA. Ninety percent of digital trust professionals say employees in their organisation are using AI, yet only 22 percent report that AI return on investment has met or exceeded expectations.
A report by the NSW Auditor-General has found the NSW Police Force needs four extra years to complete its core technology upgrade, requiring $A493 million in additional funding. The agency has spent $155 million while delivering only one of five core systems.
Gartner analyst Douglas Toombs warns that 80 years of globally interconnected trade will not unbundle neatly in 18 months, and that much of what passes for ‘sovereign cloud’ today is little more than ‘sovereign washing’.
A cybersecurity breach at US-based learning platform Instructure has compromised personal data across Australian and New Zealand education institutions.
The NSW Government has downgraded the "significant cyber incident" declared following an alleged insider data theft at NSW Treasury, with the state's Chief Cyber Security Officer confirming the breach has been contained and remediation measures are in place. The downgrade does not close the matter - criminal proceedings, an internal investigation and continuing legal reviews of potential procurement impacts remain unresolved.
Organisations that deploy AI extensively in security operations have reduced the average time to contain a data breach by approximately 80 days and cut average breach costs by $US1.9 million, according to a new white paper published by the World Economic Forum in collaboration with KPMG.
