2024 Exposed: The Alarming State of Australian Data Breaches

Implementing multi-factor authentication, supplier risk-management frameworks, and staff security training could help to reduce data breaches.

Two-Thirds of Security Leaders Consider Banning AI-Generated Code, Report Finds

Security leaders don’t believe developers check the quality of the AI-generated code with as much rigour as they do their own, according to a report from Venafi.

80% of Critical National Infrastructure Companies Experienced an Email Security Breach in Last Year

The scale of the potential disruption from a successful attack on CNI is all too tempting for cyber attackers.

Australian IT Spending to Surge in 2025: Cybersecurity & AI Focus

Australia's IT spending is set to surge 8.7% in 2025, driven by cyber security needs, AI investments, and hardware upgrades as Windows 10 ends.

Three Quarters of Dependency Vulnerability Patches Lead to Breakages, Report Finds

Minor updates break clients 94% of the time, while version upgrades cause issues 95% of the time, according to Endor Labs researchers.

Apptio: How Australians Are Navigating Economic Pressure Through Strategic IT Investments

Many Australian companies are investing in new technology, but others are having a hard time justifying such investments given the current economic climate.

VMware ESXi Servers Targeted by New Ransomware Variant from Cicada3301 Group

A number of similarities between Cicada3301 and ALPHV/BlackCat indicates that it could represent a rebrand or offshoot group.

Passkey Adoption Is Accelerating in APAC — Except for Australia

Australian banks and government agencies are not rushing to adopt passkey authentication methods, despite the added security benefits.

Volt Typhoon Hackers Exploit Zero-Day Vulnerability in Versa Director Servers Used by MSPs, ISPs

There are approximately 163 devices worldwide that are still exposed to attack via the CVE-2024-39717 vulnerability.

Nearly 1/3 of Companies Suffered a SaaS Data Breach in Last Year

The finding is linked to a lack of visibility of the business’s app estate and decentralised security governance.