Cyber Security News
The latest threat intelligence and security headlines from around the world — grouped by week and broken down by region, with a full historical archive.
Smartsheet completes IRAP assessment at sensitive classification level
Enterprise platform provider Smartsheet has successfully completed an IRAP assessment, a key requirement for handling sensitive data within the Australian government.
AI sharpens cat-and-mouse hacking battle as companies strengthen defences
Cybersecurity vulnerabilities have tripled to nearly 37,000 as companies face an evolving threat landscape driven by AI-powered attacks.
ASI Solutions Acquires Insicon Cyber
ASI Solutions has expanded its cybersecurity capabilities by acquiring Australian specialist firm Insicon Cyber, which operates a security centre in North Sydney.
Binance and Deribit remove SignalPlus API keys following security incident
Major cryptocurrency exchanges Binance and Deribit have taken action to remove SignalPlus API keys after identifying a security issue affecting user accounts.
French bank Credit Mutuel Arkea reports €100 million loss following cyberattack
The French financial institution Credit Mutuel Arkea has disclosed a significant financial loss of €100 million resulting from a recent cyberattack.
PwC Launches Agentic AI Cyber Managed Services
PwC Australia has introduced a 24/7 managed cyber defence service for private and mid-market organisations, leveraging agentic AI technology.
Rapid7 warns of two additional Ivanti Connect Secure zero-days under active exploitation
Rapid7 has issued a warning regarding two new zero-day vulnerabilities in Ivanti Connect Secure that are currently being exploited in the wild.
Singapore Airlines says 46,000 booking records affected by Amadeus breach
Singapore Airlines has confirmed that 46,000 booking records were exposed following a data breach at their technology provider, Amadeus.
Several French blood banks hit by cyber attack
Multiple blood donation centers in France have been forced to suspend operations following a significant cyberattack impacting their digital systems.
Global website outage after AI detects flaws
A series of emergency shutdowns hit banking, airline, and government services globally following the exploitation of critical PHP vulnerabilities.
Seven Tech Firms Named Australian Export Awards Finalists
Austrade has selected seven Australian digital and technology businesses as finalists for the Digital and Smart Technology category in the national Export Awards.
UK NCSC warns of unprecedented rise in cyber incidents amid AI vulnerabilities
The UK's National Cyber Security Centre has issued a warning regarding an expected surge in cyber attacks, driven largely by the exploitation of AI-related vulnerabilities.
Binance hack prompts US regulatory review of banking systems
Following a security breach at Binance, US regulators have initiated inquiries into the security of banking systems connected to the exchange.
Hackers steal $6.3 billion from Binance in record cryptocurrency heist
In one of the largest cryptocurrency thefts in history, attackers successfully siphoned approximately $6.3 billion from the Binance platform.
New Windows infostealer malware VOLTA-AUTODOXER identified
Researchers have discovered a new Windows-based infostealer malware that leverages artificial intelligence to prioritize high-value targets.
European supermarkets rush to patch vulnerabilities after region-wide fridge hack
Supermarket chains across Europe are scrambling to secure their infrastructure after a widespread cyberattack targeted connected refrigeration systems.
UNITAR launches its first Global Cybersecurity Office in Riyadh
The United Nations Institute for Training and Research has opened a new office in Saudi Arabia to foster international cooperation, research, and policy development to bridge global cybersecurity capacity gaps.
Singapore Airlines reports 46,000 booking records affected by Amadeus breach
Singapore Airlines has confirmed that approximately 46,000 customer booking records were compromised due to a cybersecurity incident at their service provider, Amadeus.
ASD releases Annual Cyber Threat Report
The Australian Signals Directorate's latest report indicates an 80% increase in cybersecurity incidents and notifications reported by Australian entities over the past year.
Digital sovereignty in practice: three examples of balancing control with global reach
Australian businesses are navigating complex regulatory environments, including the Privacy Act and the Security of Critical Infrastructure Act, to balance digital sovereignty with global operations.
DHS contractor requests removal of database access containing 41,000 records
A contractor for the U.S. Department of Homeland Security has moved to restrict online access to a database containing sensitive information on over 41,000 individuals.
A wave of new cyberattacks is just getting started
Recent cyberattacks on nine major South Korean banks have exposed the financial data of tens of thousands of people, highlighting a growing trend of AI-assisted hacking.
Trojanized Claude Code extension backdoors thousands of installs
A malicious Claude Code extension containing an SSH backdoor was discovered on the Cursor marketplace, affecting up to 5,000 installations before being removed.
Australia reports 20% rise in cyber incidents, nearly 80% jump in threat notifications amid critical infrastructure risks
The Australian Signals Directorate's latest annual report reveals a 20% increase in cyber incidents and a significant rise in threat notifications, highlighting the growing complexity of the threat landscape for Australian critical infrastructure.
Senetas Reports $20.2 Million Revenue in FY26
Australian cybersecurity firm Senetas reported strong financial growth for the 2026 fiscal year, driven by rising global demand for sovereign security solutions.
Federal bankruptcy courts contractor confirms no data stolen in recent cyberattack
IT contractor BAE Systems and the Administrative Office of the U.S. Courts confirmed that systems were restored following a cyberattack with no evidence of data exfiltration.
Signals Directorate Releases Annual Threat Report
The latest annual threat report from the Australian Signals Directorate highlights that cyber attackers are increasingly using pre-positioned access to maintain long-term persistence in sensitive systems.
WordPress plugin vulnerabilities identified in latest security audit
Multiple WordPress plugins, including News Kit Addons for Elementor, have been found to contain authorization flaws that could allow unauthenticated users to manipulate sensitive data.
Security Bulletin 28 October 2026
A technical security bulletin detailing multiple vulnerabilities in WordPress plugins and Acronis Cyber Infrastructure, highlighting risks of unauthorized access and privilege escalation.
CVE-2026-97631 UEFI firmware flaw may impact servers using EDK2 and PXE functionality
A critical UEFI firmware vulnerability has been identified that could potentially impact servers utilizing EDK2 and PXE network boot functionality.
Acronis Cyber Infrastructure vulnerability disclosure
A new security advisory details sensitive information disclosure risks in Acronis Cyber Infrastructure versions prior to build 6.0.1-112.
Australia’s Cyber Spy Chief warns of AI-accelerated hacking disruption
The head of the Australian Signals Directorate has warned that the integration of artificial intelligence into cybercriminal toolkits is expected to cause increased disruption to Australian networks.
CISA Confirms Active Exploitation of PHP2Shell Vulnerabilities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical PHP vulnerabilities, known as PHP2Shell, to its Known Exploited Vulnerabilities (KEV) catalog following reports of active exploitation.
Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers
The Australian Signals Directorate (ASD) successfully gained access to the backend of the Amadey malware operation, allowing them to disconnect 180,000 infected computers worldwide from the criminal controller.
FBI Seizes Virtualine Domain Over Alleged Criminal Hosting
The FBI has seized the domain for Virtualine, citing its involvement in providing hosting services for criminal activities and facilitating Bitcoin money laundering.
Hackers Exploited Cisco SD-WAN Flaw to Plant Malware
Attackers have been observed exploiting a vulnerability in Cisco SD-WAN to deploy malware specifically designed to steal encryption keys from compromised systems.
Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns
Security researchers have uncovered that the threat actor Volt Typhoon utilized a covert network to facilitate four separate zero-day exploitation campaigns.
Data theft overtakes encryption in recent cyber intrusions
New industry analysis reveals that data exfiltration has become the primary pressure point in cyberattacks, appearing in 83% of cases investigated during the third quarter.
AISA warns against rushing into AI cyber defences
The Australian Information Security Association has cautioned local organisations against investing in AI-driven cyber defences before addressing fundamental security weaknesses.
US, UK and the Netherlands issue joint warning on Iran-linked spyware
Intelligence agencies from the US, UK, and the Netherlands have issued a joint advisory regarding the 'CHOSEN BRICK' spyware family, which is being used by Iran-linked actors to steal sensitive communications.