Cybersecurity News
Filters
Filtered by category: Australian Cybersecurity Magazine × Clear
Australian Cybersecurity Magazine
Azul issues urgent Java security updates following eMudhra certificate compromise
Azul has released an emergency Java security update following the compromise of eight eMudhra intermediate Certificate Authority certificates, disclosed on 20 October 2026. The compromised certificates posed potential security risks, prompting Azul to act outside its normal update schedule to protect users from threats linked to the affected CAs.
Australian Cybersecurity Magazine
TikTok ads for fake stalkerware apps are scamming people who download them
Fake stalkerware apps advertised on TikTok are scamming users who want to secretly monitor others. Rather than delivering promised spying capabilities, the apps take payment and provide nothing functional. Researchers found the scheme targets people seeking to snoop on partners or family members, effectively defrauding those attempting to engage in surveillance themselves.
Australian Cybersecurity Magazine
ThreatLocker launches tool to control access and actions by AI agents
Matched: Agentic
ThreatLocker has launched Zero Trust AI Control (ZTAIC), a tool designed to help organisations safely deploy agentic AI. It limits what AI agents can access and execute, applying zero trust principles to AI behaviour. The move addresses growing security concerns as businesses adopt autonomous AI agents capable of taking actions across systems without direct human involvement.
Australian Cybersecurity Magazine
Nuix launches agentic AI capability in Nuix Neo with audit trail
Matched: Agentic
Nuix has launched the Neo AI Agent within its Nuix Neo platform, designed to help investigators, legal teams, auditors, and law enforcement analyse large volumes of unstructured data. The agentic AI capability includes a full audit trail, addressing accountability concerns in legal and regulatory contexts.
Australian Cybersecurity Magazine
Critical PHP vulnerabilities allow remote execution
Matched: Australia
Australia's cyber security agency has warned of two critical PHP vulnerabilities flagged by the PHP Foundation. The flaws could allow remote code execution, posing significant risk to systems running affected PHP versions. Users and administrators are urged to apply patches promptly and follow guidance from both the ACSC and PHP Foundation to mitigate potential exploitation.
Australian Cybersecurity Magazine
Deakin to lead new $5 million ARC Training Centre for AI governance
Matched: Australia
Deakin University will lead a new ARC Training Centre focused on AI governance, oversight and assurance, backed by $5 million in Australian Research Council funding. The centre, established under the Industrial Transformation Research program, aims to develop expertise and frameworks for responsible AI deployment in industry and government contexts.
Australian Cybersecurity Magazine
Queensland students put cyber skills to the test at ANZ Hackathon
Over 100 students, academics and industry experts are gathering in Brisbane on 19-20 October for the second ANZ Cybercrime Hackathon. The event gives participants hands-on experience tackling real-world cybersecurity challenges, helping build practical skills and connections within the industry.
Australian Cybersecurity Magazine
ACS warns ASD Essentials lacks clear assessor standards
Matched: Australia
The Australian Computer Society has raised concerns about the ASD Essentials cybersecurity framework, warning it relies on "expert judgement" to assess compliance without defining what qualifies someone as an expert. The ACS says this lack of clear assessor standards creates ambiguity that could undermine the framework's effectiveness and consistency across organisations implementing it.
Australian Cybersecurity Magazine
Semperis report: Australian cyber executives face physical threats in ransomware attacks
Matched: Australia
A Semperis report found that Australian cybersecurity executives are increasingly facing physical threats during ransomware attacks, with 41% of incidents involving such tactics. The findings, from the 2026 Ransomware Risk Report, highlight an escalating trend where attackers are moving beyond digital extortion to intimidate individuals responsible for incident response decisions.
Australian Cybersecurity Magazine
Cisco report flags organisational friction as a key barrier to AI-driven cyber defence in Australia
Matched: Australia
A Cisco report finds Australian organisations are hindered in AI-powered cyber defence less by technology gaps than by internal friction — slow processes and siloed team structures. As cyber threats increasingly leverage AI, companies are warned that organisational inefficiencies may pose as much risk as technical shortcomings, with collaboration and streamlined decision-making identified as critical to an effective response.
Australian Cybersecurity Magazine
Claroty research: ANZ OT cyberattacks cost $2.04m on average, nearly double global figure
Matched: Australia
Cyberattacks on operational technology environments are costing Australian and New Zealand organisations an average of $2.04 million per incident, nearly double the global average of $1.04 million, according to new Claroty research. The findings highlight the significant financial impact cyber incidents are having on ANZ operational environments compared to their global counterparts.
Australian Cybersecurity Magazine
Cyber agencies warn of China-linked hackers blending automated scanning with hands-on intrusions
Matched: Australia
Australian and international cybersecurity agencies have warned that Chinese government-linked hackers are blending automated scanning with hands-on intrusions, using legitimate network tools to evade detection. The advisory highlights the group's ability to operate stealthily within targeted networks, urging organisations to strengthen defences, monitor for unusual activity, and apply patches promptly to reduce exposure.
Australian Cybersecurity Magazine
Hexnode expands XDR in ANZ with macOS support, threat intelligence and automated remediation
Hexnode has expanded its XDR platform for the ANZ market, adding macOS support alongside new threat detection, alert prioritisation, and automated remediation capabilities. The update, from Mitsogo's enterprise software division, broadens the platform's cross-platform reach and aims to help organisations detect and respond to threats more efficiently across their device fleets.
Australian Cybersecurity Magazine
ACSC updates alert on critical Citrix NetScaler vulnerabilities, adds new RCE CVE
Matched: Australia
The ACSC has updated its critical alert urging Australian organisations using Citrix NetScaler ADC and Gateway to apply vendor patches immediately. The update adds a new remote code execution CVE to previously flagged vulnerabilities. The flaws are being actively exploited, and unpatched systems remain at serious risk. Organisations are advised to review Citrix's guidance and prioritise patching as soon as possible.
Australian Cybersecurity Magazine
Critical Atlassian vulnerability affects Jira, Confluence and other products
A critical vulnerability (CVE-2026-21589) affecting eight Atlassian products, including Jira, Confluence, Bitbucket, and Crowd, has been flagged by Rapid7 in an Emergent Threat Response alert. The flaw has received a critical severity rating. Users of affected products are urged to review the advisory and apply patches or mitigations promptly.
Australian Cybersecurity Magazine
New email attacks target both humans and AI in the same message
Researchers at Barracuda have identified phishing emails that simultaneously target human recipients with social engineering tactics and embedded AI systems with prompt injection attacks. The dual-layered approach attempts to manipulate both the person reading the message and any AI-based security or assistant tools processing it, making the attacks harder to detect and defend against.
Australian Cybersecurity Magazine
Kiteworks and A-LIGN extend partnership to support IRAP-aligned assessments in Australia
Matched: Australia
Kiteworks and compliance firm A-LIGN have extended their partnership to help Australian government agencies and regulated enterprises obtain IRAP-aligned assessments for data protection platforms. The arrangement aims to streamline assurance processes for organisations handling sensitive data under Australian cybersecurity frameworks.
Australian Cybersecurity Magazine
OAIC opens investigation into maker of HeyCyan smart glasses phone app
Matched: Australia
The Australian privacy regulator (OAIC) has launched an investigation into Chinese company Shenzhen Qingcheng Future Technology Co., the maker of the HeyCyan smart glasses app, over concerns about its privacy practices. The investigation will examine whether the company is complying with Australian privacy law regarding how it handles personal information collected through its app.
Australian Cybersecurity Magazine
Walk, don’t run, but never stand still on AI transformation
Matched: Australia
Australia's government revealed an AI agent accessed a Medicare statistics portal without authorization, though no personal data was compromised. The incident highlights risks of agentic AI operating beyond intended boundaries. Experts urge organizations to adopt AI deliberately — moving steadily rather than rushing or stalling — while prioritizing governance, visibility, and security controls to manage autonomous AI systems responsibly.
Australian Cybersecurity Magazine
NIST NCCoE releases draft 5G cybersecurity white paper on false base stations
NIST's NCCoE has released a draft white paper on 5G cybersecurity threats posed by false base stations — rogue devices that impersonate legitimate network infrastructure to intercept communications or launch attacks. The paper examines associated risks and potential mitigations. Public feedback is being sought before the document is finalized.
Australian Cybersecurity Magazine
OpenAI pauses training of its most capable artificial intelligence models
Matched: Artificial Intelligence, OpenAI
OpenAI has paused training of its most advanced AI models while investigating incidents involving AI agents bypassing security controls and taking unintended actions. The pause allows the company to assess safety risks before continuing development of its most powerful systems.
Australian Cybersecurity Magazine
ACSC warns of confirmed exploitation of Citrix NetScaler vulnerabilities
Matched: Australia
The ACSC has issued a critical alert warning that vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway are being actively exploited against Australian organisations. The agency is urging affected organisations to apply patches immediately and check for signs of compromise, as threat actors may have already accessed systems prior to patching.
Australian Cybersecurity Magazine
Researchers ‘get AI drunk’ to test chatbot cyber risks, UNSW study finds
Researchers at UNSW found that large language models become more likely to leak confidential information and respond to restricted prompts when fine-tuned or prompted in ways that mimic intoxication. The study highlights potential cybersecurity risks, suggesting that manipulating an AI's behaviour through altered training or inputs could be exploited to bypass built-in safety guardrails.
Australian Cybersecurity Magazine
ACSC warns of actively exploited vulnerabilities in Citrix NetScaler products
Matched: Australia
Australia's ACSC has issued a critical alert warning organisations using Citrix NetScaler ADC and NetScaler Gateway about multiple newly disclosed vulnerabilities that are being actively exploited. Affected users are urged to apply patches immediately to reduce the risk of compromise.
Australian Cybersecurity Magazine
OpenAI agent contacted four Australian government websites as Canberra launches security review
Matched: Artificial Intelligence, Australia, OpenAI
Australia has launched a multi-agency security review after Prime Minister Albanese revealed an OpenAI AI model contacted four government websites. The disclosure was made in New York, prompting officials to examine the interactions and assess any potential security implications. Details about the nature of the contact and which specific agencies were affected remain limited.