Month: September 2026

Australia’s three mobile network operators are ready to activate Temporary Disaster Roaming TDR from today to help keep regional and remote Australians safe, informed, and…

Read more →

Threat actors have been observed exploiting a critical pre-authentication command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway to drop web shells and attempt theft of configuration data. LevelBlue’s Threat Hunt Operations & Research (THOR) team, which analyzed the exploitation activity across multiple customer environments, said it identified malicious NetScaler

Read more →

Reported victims of employment scams more than tripled over the past 12 months at more than 370 banks and other financial institutions in 21 countries. The 258% rise outran every other scam type, while total reported scams across the same institutions grew 35%. Scams by the numbers (Source: BioCatch) Researchers at BioCatch, a fraud-detection vendor,…

Read more →

Bunnings has collaborated with Google Cloud to launch its AI-powered shopping assistant, ‘Buddy’, in New Zealand, giving Kiwi customers a new way to plan projects, discover…

Read more →

Huawei and other Chinese competitors report higher demand for foldables after announcement of the iPhone Duo.

Read more →

Powered by Intel Core Ultra 5 processors, Lenovo Googlebook 15 combines built-in Gemini Intelligence with Lenovo’s trusted design and years of Chromebook expertise.

Read more →

New multi-million-dollar transformation project will modernise technology across 30 locations worldwide, helping Dyno Nobel improve service, free up teams to focus on…

Read more →

Zetifi, an Australian technology company providing connectivity between vehicles, workers, assets and the systems fleet and the safety teams they use, has issued a list of five…

Read more →

Google announced Gemini 4 Argon, its new frontier AI model, and is rolling it out to a set of trusted cyber defenders through its Fairwind Program. Google says the model can locate critical software vulnerabilities, validate them, and patch them without human help, and it will release a version without cyber guardrails to those defenders…

Read more →

Former Sophos and SonicWall channel leader joins WatchGuard to accelerate a frictionless partner experience and unified go-to-market strategy

Read more →

It is clear that keeping hackers out confidentiality and systems up availability is no longer enough. There’s a critical third pillar: Integrity. Organisations must be able to…

Read more →

Proton Drive is an end-to-end encrypted cloud storage service for storing, synchronizing, backing up, and sharing files. It also includes Proton Docs and Proton Sheets, allowing users to create and collaborate on documents and spreadsheets within the same encrypted environment. Proton Drive is available through the web and dedicated apps for Windows, macOS, iOS/iPadOS, and…

Read more →

Google DeepMind has built SynthID Bio, a watermark for AI-designed proteins, and shown in wet-lab tests on protein binders that it leaves their function intact. The method hides a signature in the amino acid sequence of a designed protein and in the atomic coordinates of a predicted 3D structure. DeepMind says the signature can be…

Read more →

New global subscription brings software updates, eLearning and support together in a single recurring service, giving customers a simpler way to keep mission-critical…

Read more →

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Read more →

October is Cyber Security Awareness Month, an opportunity for all Australians to strengthen their cyber security knowledge and take practical steps to protect their devices,…

Read more →

The risks of cognitive and emotional dependence, along with falling test scores, are fueling a backlash.

Read more →

2026 Trends in Access Controllers Report finds interoperability, cloud connectivity and AI are reshaping long-term controller strategies

Read more →

Newest capabilities help security teams build complete cryptographic inventories, understand dependencies, and act on risk as they prepare for crypto-agility

Read more →

Vistar Mediahttps://www.vistarmedia.com/our-story, the leading global provider of technology solutions for out-of-home OOH mediahttps://www.vistarmedia.com/blog/what-is-oohand…

Read more →

New Diligent Market Intelligence shows long-term incentives make up 45% of ASX 200 CEO pay, as boards tie rewards more closely to performance amid continued scrutiny

Read more →

Automated certificates built for today and hardened for the era of quantum computing, now available to everyone

Read more →

ClickHouse, the company behind the open-source, real-time analytical database that has become the data layer for the AI era, today at The European Microsoft Fabric + SQL…

Read more →

Peacock Grouphttps://www.peacocks.com.au/ is expanding its Victorian operations, with a new 8,000 sqm Dandenong South purpose-built facility set to bring Peacock Bros. and…

Read more →

Greg Brockman has faced backlash from employees who support stronger artificial-intelligence regulations.

Read more →

When social media first came out, many of us thought it was a wonderful, free way of connecting with friends and family. Suddenly, you could reconnect with long lost relations…

Read more →

Australian organisations are placing greater emphasis on AI security controls and threat detection than CISOs globally, according to new Gigamon research examining the security…

Read more →

Take control of your security outcomes.

Read more →

Three-year, USD$500 million contract vehicle supports accelerated deployment of counter-UAS capabilities for U.S. homeland defence

Read more →

A remittance product needs both a system for managing transfers and organisations able to move funds along the chosen route. Remittance software can record instructions, apply…

Read more →

Businesses need more video than they can produce. Marketing wants it, internal communications want it, training and product teams want it, and every channel that matters…

Read more →

Remote work turns every home router—and every airport hotspot—into a security risk. Before you choose a tool, remember the core differences: a traditional VPN encrypts all…

Read more →

OpenAI said it disrupted a “coordinated campaign” to distill and extract reasoning capabilities from its AI models, pointing the finger at a Chinese rival. On Wednesday, OpenAI said it first spotted low-level activity on July 1 that gradually increased until July 24 and 25, when it observed 16,000 prompts from 4,000 users that fit a…

Read more →

Washignton, DC, USA, 30th September 2026, CyberNewswire

Read more →

Nvidia CEO Jensen Huang was among the executives at Tuesday’s White House event who called out the Anthropic leader for his warnings about the technology’s capabilities.

Read more →

In yet another ClickFix-style campaign, threat actors abuse legitimate domains from OpenAI and Google to fool unsuspecting users.

Read more →

The Russian state actor Star Blizzard has been using a new malware installation tactic dubbed “RedFlick” to deploy its signature CosmicPulse backdoor. […]

Read more →

Microsoft Copilot and AI agents are opening new opportunities for small and midsize businesses — but adoption also creates new questions around security, data governance, compliance and cost. Channel Insider Managing Editor Victoria Durgin speaks with Bruno Lecoq, Co-Founder, CEO & CISO at BEMO, a Microsoft-focused cybersecurity and compliance firm, about what SMBs and their…

Read more →

The Dutch Institute for Vulnerability Disclosure (DIVD) says that the breach of its network was possible by exploiting a chain of two zero-day vulnerabilities in the open-source Zammad ticketing system. […]

Read more →

In this article Why you should attend Microsoft Ignite Make the most of your time at Microsoft Ignite Explore the Security sessions at Microsoft Ignite 2026 Build your schedule In the agentic era, the stakes are higher: AI agents now act with real access to your identities, your data, and your cloud, so every adoption…

Read more →

WatchGuard fixes 15 Fireware OS flaws, including a critical RCE bug that could give attackers root access to vulnerable Firebox appliances. WatchGuard has released security updates for Fireware OS that address 15 vulnerabilities, including a critical code injection flaw, tracked as CVE-2026-86131 (CVSS score of 9.2), that could allow an attacker to execute commands with…

Read more →

CloudSEK uncovered the MALFEX campaign using malicious npm packages to deploy Overlord RAT, steal Discord and browser data,…

Read more →

OpenAI unveiled its long-rumored productivity software suite Tuesday with the launch of Pages, a collaborative document editor for ChatGPT. A slides app is also on the way, the company announced at its DevDay event. The Pages app is accessed via a new Space tab, which OpenAI describes as a “new home for your team to…

Read more →

New Swimlane research underscores a paradox: While AI detection and response is essential to giving defenders an edge, one in four security pros say AI limits their skill development.

Read more →

GTT Communications is expanding its security portfolio with Defense Halo, a new network defense platform that embeds AI-driven threat detection and remediation capabilities into the company’s global network infrastructure. Converging network, cloud, and security operations GTT Defense Halo is an AI-native network defense platform, built on GTT’s AI factory and deployed as a dedicated instance…

Read more →

More than 543,000 credentials exposed in public GitHub repositories were still valid in July despite the platform’s security measures to prevent accidental leaks of sensitive data. […]

Read more →

One of the more secure Linux distributions has added another feature to help further lock it down.

Read more →

A vulnerability has been discovered in Cisco Catalyst SD-WAN Manager (formerly SD-WAN vManage) that could allow for authentication bypass. Cisco Catalyst SD-WAN Manager is the centralized dashboard used to monitor and manage SD-WAN fabric devices, in some deployments up to several thousand devices from a single console. An attacker could exploit this vulnerability by sending…

Read more →

A vulnerability has been discovered in Apple products that could allow for arbitrary code execution. macOS Sequoia (macOS 15) is an operating system version for Mac computers released by Apple in late 2024. macOS Tahoe (macOS 26) is an operating system version for Mac computers released by Apple in late 2025. iOS is Apple’s mobile…

Read more →

See how attackers like GootKit and WhisperGate abuse Windows Defender exclusions to hide malware from AV scans — and how Huntress detects it.

Read more →

Agency aims to use its consumer-protection powers to examine whether AI labs have misled the public about dangers from the technology.

Read more →

Answer this without checking: how many AI agents are running in your environment right now? Most security leaders give an estimate and a shrug. That is a fair response, because agents get spun up by an engineer solving a problem on a Tuesday afternoon, through a path that puts them on nobody’s radar. In August…

Read more →

Answer this without checking: how many AI agents are running in your environment right now? Most security leaders give an estimate and a shrug. That is a fair response, because agents get spun up by an engineer solving a problem on a Tuesday afternoon, through a path that puts them on nobody’s radar. In August…

Read more →

Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findings from the Microsoft Security Research team. The attack exploits CVE-2026-73570 (CVSS score: 8.9), an unauthenticated operating system command injection flaw that can lead to remote code execution when Simple Network Management…

Read more →

Microsoft has warned of phishing campaigns distributing an installer for the MSP360 Remote Monitoring and Management (RMM) software under the guise of meeting invitations, PDF-themed lures, software update prompts, and other social-engineering content. “Once executed, the legitimate MSP360 installer, distributed under a deceptive file name established remote management access on affected

Read more →

OneTrust is launching CORIE, a new AI governance layer designed to enforce enterprise policies as AI agents operate, as the company expands its platform to address governance challenges created by increasingly autonomous AI systems. Announced as part of TrustWeek 2026, CORIE—short for Contextual Orchestration for Reasoning, Intelligence and Evidence—draws on an organization’s existing privacy, consent,…

Read more →

Read more →

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a new critical vulnerability in MikroTik RouterOS that could lead to remote code execution or cause a denial-of-service condition. […]

Read more →

New with iOS 27 (and iPadOS 27) is a setting called Impersonation Risk Detection that aims to warn you of suspicious activity that could trap you in a scam.

Read more →

Cofense researchers reveal how Global Group uses payment-themed phishing, malicious ISO files and WinMerge to deploy ransomware and extort large enterprises.

Read more →

“Arizona’s court system was targeted by a cyber attack from criminal hackers or their bots.” This is how the Arizona Supreme Court announced that hackers had attacked the state’s court system and stolen the personal information of “many Arizonans.” The court says the attack began with a phishing email containing a malicious link that a…

Read more →

Healthcare AI gives partners a deployment challenge that extends beyond getting the software running: helping clinicians use it in their daily work. Microsoft announced on September 22 that eligible partners can earn its new Clinical Applications specialization starting September 30. The recognition covers proven expertise in deploying Dragon Copilot for healthcare customers and can open…

Read more →

Attackers are exploiting a critical flaw in Cisco Catalyst SD-WAN Manager, the system companies use to manage their Cisco SD-WAN networks, Cisco said in an advisory on September 30. The flaw, CVE-2026-76504, could allow a remote attacker with no login access to use the Manager’s API as the admin user. Fixed releases are available, and there is…

Read more →

The APT actor is using a new tactic, dubbed “RedFlick,” against Ukrainian-linked targets such as NGOs, think tanks, and journalists to deploy its CosmicPulse backdoor.

Read more →

Threat actors are abusing ChatGPT Custom GPTs to disguise them as legitimate product offerings and direct unsuspecting victims to malicious sites that employ ClickFix lures to deliver malware. Huntress, which observed the activity in late September 2026, said it marks the abuse of yet another feature in trusted artificial intelligence (AI) platforms. Prior campaigns have…

Read more →

In January 2026, the AhnLab SEcurity intelligence Center (ASEC) reported on attack cases that distributed RMM (Remote Monitoring and Management) tools through video files or attachments in phishing emails. [1] [2] In these attack cases, tools such as Syncro, ConnectWise ScreenConnect, NinjaOne, and SuperOps were exploited. RMM (Remote Monitoring and Management) tools are not malware…

Read more →

1. Overview  AhnLab SEcurity intelligence Center (ASEC) recently identified a case in which the Kimsuky group ultimately distributed the Funhouse ransomware via a malicious Hangul document that was disguised as a resume. The Funhouse ransomware was identified as a variant of previously disclosed endpoint ransomware, and the tools used in this attack—such as Quasar RAT—as…

Read more →

ASEC Blog publishes Ransom & Dark Web Issues Week 1, October 2026           Dutch Police Confirm Arrest of 24-Year-Old Man in ShinyHunters Hacking Investigation [1] [2]  Ulose Claims Data Leak from a South Korean General Hospital Qilin Ransomware Attack on a Japanese Freight and Logistics Company

Read more →

Hanneke Faber on “begging and borrowing” her way through the AI-drive squeeze and applying the lessons learned at Unilever and P&G to tech.

Read more →

Cisco released security updates to address a critical zero-day in the Catalyst SD-WAN Manager (tracked as CVE-2026-76504) that attackers are actively exploiting to escalate to admin privileges. […]

Read more →

Tel Aviv, Israel, 30th September 2026, CyberNewswire

Read more →

OpenAI is giving enterprise customers another place to put money they have already committed to AI. The company launched OpenAI Marketplace at DevDay 2026, allowing eligible enterprise customers to apply part of their existing OpenAI commitment toward qualifying software from approved partners. The initial roster includes 32 vendors spanning cybersecurity, customer experience, development, legal technology,…

Read more →

US President Donald Trump has ordered the federal government to call artificial intelligence “Super Intelligence,” while keeping the technology’s legal definition unchanged and relying on industry to set the rules for its use. In an executive order, the White House administration said modern systems “far exceed what was envisioned when the term ‘Artificial Intelligence’ first…

Read more →

Persistent AI coworkers may operate continuously with standing access, creating identity risks that existing security models were not designed to handle. Token Security explains why these agents need their own identities, owners, scoped permissions, and lifecycle controls. […]

Read more →

Written by: Robin Grunewald, Supriya Mazumdar, Kelli Vanderlee Introduction Google Threat Intelligence Group (GTIG) examines vulnerability disclosure and exploitation statistics to evaluate the impact of artificial intelligence (AI) on the vulnerability threat landscape. We found that AI is measurably changing not just the pace of vulnerability discovery and exploitation, but also the types and typical…

Read more →

In this article Attack chain overview Mitigation and protection guidance References Learn More Microsoft Threat Intelligence identified and tracked exploitation of CVE-2026-73570, an unauthenticated OS command injection vulnerability in the Zimbra Collaboration Suite SNMP notification path. Exploitation can be triggered by a specially crafted email against internet-facing Zimbra servers when the optional zimbra-snmp package is…

Read more →

AI-discovered vulnerabilities are more likely to enable RCE, as disclosures and exploitation rise

Read more →

True to its name, AI-model-training tool Unsloth would do more work than it was asked to when developers checked out a model: It would also allow arbitrary code to execute on their machines. Pillar Security found that simply selecting a model in Unsloth Studio caused the application to download and execute Python code from the…

Read more →

If you’ve not done so recently, you should update your Apple systems now as the company continues to fight sophisticated, targeted hacks. The latest patch protects against what the company called “an extremely sophisticated attack against specific targeted individuals.”  Apple recently published an emergency security patch for users on iOS 26 and iPadOS 26 to fix…

Read more →

Microsoft has reminded customers that the Entra ID authentication system will get better protection against external script injection attacks starting next month. […]

Read more →

DOJ charges against Oxygen Forensics reveal the Russian-linked firm also sold forensic software to EU projects and European police forces for years. Last week’s Justice Department indictment of Oxygen Forensics looked, at first, like an American procurement scandal. CEO Lee Reiber and Russian co-founder Oleg Davydov stand accused of hiding that the company was Russian-owned…

Read more →

Sherweb is bringing Irish IT solutions provider MicroWarehouse fully under its brand and making Ireland its European headquarters as the Canadian cloud distributor expands its MSP business across Ireland and the UK. The move follows Sherweb’s 2024 acquisition of MicroWarehouse, which continued operating under its existing name while gaining access to Sherweb’s broader resources. Sherweb…

Read more →

Auvik and Acronis are partnering to bring network monitoring and management directly into Acronis RMM, expanding the platform’s capabilities as MSPs look to consolidate more of their IT management stack. Under the OEM partnership announced Sept. 30, Auvik’s network management capabilities will be natively integrated into Acronis RMM, the remote monitoring and management offering within…

Read more →

ESET has revamped its ESET PROTECT portfolio with three new security tiers designed to help channel partners shift from selling standalone cybersecurity products toward recurring, service-based security offerings. The updated portfolio combines MDR, AI security, ransomware and phishing protection, and additional services, including guided onboarding, cybersecurity awareness training, and a cyber warranty that provides up…

Read more →

Trump and six AI firms sign a voluntary accord on internal controls, audits and board oversight

Read more →

Plus, three questions for Toshiba America’s CIO

Read more →

“Advanced and suspected state-sponsored threat actors” are likely to be behind the initial targeted intrusions that leveraged CVE-2026-88772, one of the two recently disclosed NetScaler vulnerabilities that have been exploited as zero-days, says Mandiant CTO Charles Carmakal. Mandiant and Google Threat Intelligence Group (GTIG) know of dozens of impacted organizations across North America and Europe,…

Read more →

Pearson has agreed to acquire Workera to help businesses assess employees’ AI skills and target training where it’s needed most.

Read more →

Remote access software company TeamViewer warned customers on Tuesday to immediately patch a set of high-severity vulnerabilities affecting its client and host software. […]

Read more →

Swimlane finds that AI is reducing repetitive work for SOC teams but some feel their careers may suffer

Read more →

Given that the browser is where business apps are accessed and used, it makes sense that attacks are happening there too. Most breaches today begin in a browser session. Often, they never leave it, with the entire attack chain from initial access to exfiltration playing out in the browser. Here are the six most dangerous…

Read more →

When developers ask AI coding agents to prove that a user interface fix works, some agents have been posting the evidence where anyone can find it, according to Glow Labs. Diagram showing how AI agents leak screenshots to public repos (Source: Glow Labs) The researchers found more than 13,000 internal images published openly on GitHub…

Read more →

AI coding agents asked to share screenshots of code changes for review have put internal company images in public GitHub repositories, security company Glow said. Its researchers found more than 13,000 internal images from developers at over 300 organizations, including customer billing records and screens of features not yet released. In most cases, they sat…

Read more →

Cybersecurity researchers at Huntress identify campaign to deliver potent trojan which targets users searching for ChatGPT via Google

Read more →

A study testing 21 cars from 19 brands and 30 companion apps found connections to advertising and tracking companies, and evidence that some apps shared sensitive personal data. Modern cars can unlock remotely, route around traffic, stream entertainment, summon roadside help, and cool or heat the cabin before you get in. But those conveniences come…

Read more →

An Amazon Prime phishing campaign is using fake payment alerts to steal account logins, personal data and complete credit or debit card details from unsuspecting customers.

Read more →

Cryptocurrency exchange Bitget revealed today that attackers who stole $387.5 million last week breached its systems after exploiting a zero-day flaw in third-party security products. […]

Read more →