Details have been published of a critical flaw in the programming language PHP, which is the backbone of more than 70% of all websites. Left unfixed, the flaw would allow hackers to easily take over and compromise millions of websites and the information held on their servers. In response, multiple European governments and operators including the Port of Rotterdam have taken websites offline.
Updating WordPress, Drupal or a plugin will not close the PHP flaws that took government websites offline this week. The vulnerable code sits in the PHP engine underneath them, so every server, appliance and hosting platform running PHP has to be found and updated.
Attackers have used a stolen credential from a Microsoft 365 backup service to sign in to hundreds of customer tenants. Because backup tools need broad access to mail, files and directories, the attackers inherited that access.
Data concerns have delayed or derailed AI projects at 86 per cent of organisations in the past 12 months. That is despite 95 per cent naming better use of data to improve business outcomes as a top priority.
A quarter of enterprise security breaches will trace back to AI agent abuse by 2028, Gartner predicts. It blames unmanaged machine privileges and legacy credential practices.
Australian organisations will no longer be able to summarise their cyber security posture with a single Essential Eight maturity level. The Australian Signals Directorate (ASD) has released a principles-based replacement that rates security area by area.
Origin Energy has seen no evidence that customer data taken in its July cyber incident has been published online, but chairman Scott Perkins has told shareholders the risk remains and affected customers must stay alert to scams.
On Monday, the Australian government released draft legislation for the next big overhaul of the Privacy Act. The Privacy Amendment (Personal Data Protection) Bill 2026 is now out for public comment, together with a consultation paper. It is the second instalment (or “tranche”) of privacy reform , and it is the one that matters most.
AI is an accountability issue, not a technology one. Most organisations can say what an AI tool produced. Very few can say what evidence backs that result. As AI moves into everyday decisions, that gap is the real risk, not whether the technology works.
The US is currently considering a new AI ‘kill switch’ law following an agent going rogue and engaging in unauthorised cyber activities. The proposed law would require developers to maintain the ability to slow, suspend or shut down high-risk AI systems.
Shares in Objective Corporation have continued their slide since the firm announced on July 1 that Defence Digital Group would not renew a support agreement running since 1999. The company has since shed about 40 per cent of its value.
Organisations relying on Microsoft 365 Information Barriers to enforce an ethical wall should not assume the controls cover email. Testing has found the feature blocks Teams, OneDrive and SharePoint, but does not prevent email communication in Exchange Online.
Nearly two thirds of organisations using intelligent document processing expect to change their approach within a year according to new data from analysts IDC. That is heavy churn in a market the hyperscale providers currently dominate.
Most vulnerability tooling stops at the report. A partnership announced this week is aimed at what happens next, using automation to prioritise and close gaps across infrastructure, platforms and applications.
An open letter signed by 127 technology, security and financial services organisations says the security posture most enterprises run today will not hold. AI-enabled attacks will overwhelm it within months, the letter argues. One Australian organisation has signed.
The most visible faces of artificial intelligence (AI) are things like ChatGPT, self-driving cars and humanoid robots. But AI is also quietly making inroads in our neighbourhoods.
Enterprise attitudes toward artificial intelligence are starting to mature. For the past few years, much of the conversation has centered on increasingly capable AI frontier models: which one is smartest, which benchmark it leads, and which provider appears to have the strongest technology.
