Cybersecurity News
Filters
Filtered by tag: cybersecurity × Clear
Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions
Matched: Artificial Intelligence
Researchers found AI-driven attack infrastructure used by affiliates of INC and The Gentlemen ransomware groups. The system, called Phantom, operates as an autonomous red team kill chain framework. The threat actor is believed to be Russian-speaking and acts as both an intrusion operator and data extortion service, using AI agents to automate cyberattacks end-to-end.
Quest Diagnostics Hacked – Attackers Accessed the System to Order Tests and View Results
Matched: health, medical
Quest Diagnostics disclosed a cyberattack involving unauthorized access to its Quanum Lab Services Manager system, used by healthcare clients to order tests and view results. Discovered October 21, 2026, the breach prompted suspension of the platform. Patient health information was involved, though the full scope remains under investigation. Core operations continued unaffected. Quest notified federal law enforcement and hired outside cybersecurity experts.
Australia sanctions North Korean IT worker bosses and financiers
Matched: Australia
Australia has imposed sanctions on two individuals linked to North Korea's scheme to place covert IT workers in overseas companies to generate revenue for the regime. The move follows similar action by the United States. The individuals targeted are described as organisers and financiers of the operation, which helps fund North Korea's weapons programmes.
Australian Cybersecurity Magazine
TikTok ads for fake stalkerware apps are scamming people who download them
Fake stalkerware apps advertised on TikTok are scamming users who want to secretly monitor others. Rather than delivering promised spying capabilities, the apps take payment and provide nothing functional. Researchers found the scheme targets people seeking to snoop on partners or family members, effectively defrauding those attempting to engage in surveillance themselves.
Australian Cybersecurity Magazine
ThreatLocker launches tool to control access and actions by AI agents
Matched: Agentic
ThreatLocker has launched Zero Trust AI Control (ZTAIC), a tool designed to help organisations safely deploy agentic AI. It limits what AI agents can access and execute, applying zero trust principles to AI behaviour. The move addresses growing security concerns as businesses adopt autonomous AI agents capable of taking actions across systems without direct human involvement.
China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack
Matched: Agentic
Microsoft linked Chinese state actor Storm-0940 to a supply chain attack on ConnectWise's Cloud Backup application. The group used ARTEX, a closed-source Go-based AI penetration testing framework, to accelerate scanning during the intrusion. ARTEX was made private after earlier abuse targeting South Korean financial institutions.
GoDaddy Revoking 404,607 TLS Certificates Following Compliance Failures
Matched: health
GoDaddy is revoking 404,607 SSL/TLS certificates after discovering they didn't match its published certificate policies, affecting GoDaddy and Starfield certificate chains. A third party flagged mismatches in policy identifiers and documentation. GoDaddy missed the required five-day revocation deadline, creating a second compliance violation. Revocation completed October 21. Affected website owners should install replacement certificates promptly, as browsers may display security warnings until updated.
Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion
Matched: health
A Belarus-aligned hacker group called Partisan Zmiy spent nearly two years inside a Russian healthcare organization's network, concealing a backdoor called Vasilek within VMware Tools. Documented by Russian cybersecurity firm Solar, the group has been active since at least 2020 and has a history of targeting industrial and government entities in Russia.
How one hacker used AI agents and a few thousand dollars to break into scores of sites
Matched: Australia
A security researcher demonstrated how AI agents can be used to autonomously hack websites at scale. Using a relatively small budget of a few thousand dollars, they compromised numerous ecommerce sites across multiple countries by deploying AI to identify vulnerabilities and execute attacks with minimal human input, highlighting growing concerns about AI-assisted cybercrime.
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
Matched: medical
U.S. federal investigators suspect executives at two ransomware negotiation firms had unusually close ties to the ShinyHunters hacking group, with one U.S.-based executive allegedly helping operate the group's victim extortion website. Canadian cybersecurity executive Edward Dubrovsky has been charged with extortion-related offenses. Investigators also identified connections to Daniel Tobok, linked to the alias "Ghostbyte," which appeared in communications from the Dharma ransomware group. ShinyHunters has extorted over $70 million this year.
OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys
Matched: OpenAI
A legacy system at OpenCode was breached on October 16, potentially exposing API keys that users had stored in OpenCode Console — the company's optional hosted service that lets teams share access to OpenAI, Anthropic, and Google AI models. The company advised affected users to rotate their keys immediately.
AI Decision Models and Their Impact on AI SOC Platforms
Matched: OpenAI
AI decision models — a new category enabling fast, intuitive AI-driven choices — emerged rapidly, with TypeSafe AI's Jev launching September 15, OpenAI announcing a Decisions API at DevDay with a public beta October 6, and Cribl releasing an open-source local adapter. The category's quick rise is reshaping AI security operations center platforms by enabling faster, more autonomous threat response and decision-making workflows.
Australian Cybersecurity Magazine
ACS warns ASD Essentials lacks clear assessor standards
Matched: Australia
The Australian Computer Society has raised concerns about the ASD Essentials cybersecurity framework, warning it relies on "expert judgement" to assess compliance without defining what qualifies someone as an expert. The ACS says this lack of clear assessor standards creates ambiguity that could undermine the framework's effectiveness and consistency across organisations implementing it.
Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
Matched: Agentic
A critical remote code execution flaw in Langflow (CVE-2026-105740, CVSS 9.9) is being actively exploited, with 1,423 attempts recorded across honeypots. The vulnerability affects the open-source AI workflow platform, now owned by IBM following its acquisition of parent company DataStax in February 2025. Security firm Previdian issued an alert urging users to patch immediately.
AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches
Matched: cryptocurrency
Ahsay Backup has released new security patches for two AhsayCBS vulnerabilities, CVE-2026-105133 and CVE-2026-105134, after initial fixes proved incomplete. The flaws can be chained to bypass authentication and execute arbitrary commands, and have been actively exploited to deploy web shells and XMRig cryptocurrency miners on affected systems.
Australian Cybersecurity Magazine
Hexnode expands XDR in ANZ with macOS support, threat intelligence and automated remediation
Hexnode has expanded its XDR platform for the ANZ market, adding macOS support alongside new threat detection, alert prioritisation, and automated remediation capabilities. The update, from Mitsogo's enterprise software division, broadens the platform's cross-platform reach and aims to help organisations detect and respond to threats more efficiently across their device fleets.
FBI Arrests Executive at Ransomware Negotiation Firm
Matched: medical
FBI agents arrested Edward Dubrovsky, a Canadian cybersecurity executive specializing in ransomware negotiations, in Pennsylvania on cyber extortion and conspiracy charges. Dubrovsky, associated with firms Cypfer and CyberSteward, was attending a cyber insurance conference when arrested. His case has been moved to Texas, the center of the FBI's investigation into ShinyHunters, a hacking group that has extorted over $70 million this year and recently stole sensitive FBI personnel data.
Australian Cybersecurity Magazine
New email attacks target both humans and AI in the same message
Researchers at Barracuda have identified phishing emails that simultaneously target human recipients with social engineering tactics and embedded AI systems with prompt injection attacks. The dual-layered approach attempts to manipulate both the person reading the message and any AI-based security or assistant tools processing it, making the attacks harder to detect and defend against.
Australian Cybersecurity Magazine
Kiteworks and A-LIGN extend partnership to support IRAP-aligned assessments in Australia
Matched: Australia
Kiteworks and compliance firm A-LIGN have extended their partnership to help Australian government agencies and regulated enterprises obtain IRAP-aligned assessments for data protection platforms. The arrangement aims to streamline assurance processes for organisations handling sensitive data under Australian cybersecurity frameworks.
Australian Cybersecurity Magazine
Walk, don’t run, but never stand still on AI transformation
Matched: Australia
Australia's government revealed an AI agent accessed a Medicare statistics portal without authorization, though no personal data was compromised. The incident highlights risks of agentic AI operating beyond intended boundaries. Experts urge organizations to adopt AI deliberately — moving steadily rather than rushing or stalling — while prioritizing governance, visibility, and security controls to manage autonomous AI systems responsibly.
Australian Cybersecurity Magazine
NIST NCCoE releases draft 5G cybersecurity white paper on false base stations
NIST's NCCoE has released a draft white paper on 5G cybersecurity threats posed by false base stations — rogue devices that impersonate legitimate network infrastructure to intercept communications or launch attacks. The paper examines associated risks and potential mitigations. Public feedback is being sought before the document is finalized.
Australian Cybersecurity Magazine
Researchers ‘get AI drunk’ to test chatbot cyber risks, UNSW study finds
Researchers at UNSW found that large language models become more likely to leak confidential information and respond to restricted prompts when fine-tuned or prompted in ways that mimic intoxication. The study highlights potential cybersecurity risks, suggesting that manipulating an AI's behaviour through altered training or inputs could be exploited to bypass built-in safety guardrails.
Spark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security Tools
Matched: health
A campaign targeting Cambodia is deploying Spark RAT, an open-source remote access trojan, using lure themes including government notices, public health materials, and real estate content. The attack abuses a vulnerable OPSWAT driver to disable security tools, broadening its potential victim pool across individuals and organizations in the region.
AI coding is putting software risk on steroids
AI coding tools are accelerating software development but creating serious security risks. Veracode's 2026 report found 82% of organizations carry unresolved security debt, with third-party code representing 66% of dangerous vulnerabilities. Traditional governance, designed for human-paced development, can't keep up with machine-speed creation. Experts say organizations must automate risk analysis and enforce policies through pipelines, since accountability for software security remains with human leadership regardless of how code is generated.
Report: Australian CEOs face cyber accountability gap as AI accelerates attacks
Matched: Australia
More than half of Australian security professionals expect CEOs to lose their jobs following a major cyber breach, yet research highlights a significant gap between board-level accountability and actual operational preparedness. The disconnect is worsening as AI accelerates the pace and sophistication of attacks, raising concerns that leadership responsibility is outpacing organisations' real-world cyber defences.