News
Phishers abuse little-known core Internet infrastructure
2+ hour, 49+ min ago (614+ words) Threat actors have discovered a creative misuse of reverse domain name system (DNS) delegation to deliver phishing campaigns through a part of the domain name system that was never designed to host websites. In doing so, the attackers are exploiting…...
Women in Cyber Security Summit 2026: A Movement Transforming Australia’s Cyber Future
3+ day, 17+ hour ago (48+ words) Women in Cyber Security Summit 2026: A Movement Transforming Australia's Cyber Future'iTnews Lion's group technology director to leave DTA signs sixth iteration of Microsoft licensing deal Optus to expand headcount by up to 700 Women in Cyber Security Summit 2026: A Movement Transforming…...
ASD and Five-Eyes spy agencies alert on exploited Cisco SD-WAN zero-day
3+ day, 22+ hour ago (282+ words) Attackers are exploiting a serious vulnerability in Cisco Catalyst software defined wide area network (SD-WAN) devices that enable them to bypass authentication. On top of bypassing authentication, attackers can eventually gain root superuser administrative privileges, so as to establish'long-term persistence,…...
Australia's big end of town is paying ransomware groups
4+ day, 2+ hour ago (661+ words) At least 75 Australian businesses with a turnover of more than $3 million have admitted paying off ransomware groups in the first eight months of mandatory disclosure, iTnews can reveal. The payments are being made despite'advice from the Australian Signals Directorate (ASD)…...
Google disrupts hackers that attacked 53 organisations globally
4+ day, 2+ hour ago (344+ words) Google disrupted "a Chinese-linked hacking group that breached at least 53 organisations across 42 countries, the company said Wednesday. The hacking group, tracked as UNC2814 and "Gallium," has a nearly decade-long history of penetrating government organisations and "telecommunications companies, the company said in…...
Seven years' prison for Australian who sold zero-days to Russia
4+ day, 20+ hour ago (300+ words) Peter Williams, the former general manager of United States defence contractor L3Harris's cyber security arm Trenchant, was today sentenced to seven years and three months in prison by a US district court. The 39-year-old Williams had pleaded guilty in October…...
Researcher shows physical attack bypassing BitLocker
5+ day, 20+ hour ago (563+ words) Showing that physical access to a device can spell "game over" for its security, a Canadian penetration tester has successfully demonstrated a string of attacks that allow a determined threat actor to get through data protection measures in PCs. At…...
ASD releases Azul open-source malware analysis tool
5+ day, 21+ hour ago (229+ words) The Australian Signals Directorate (ASD) has released a tool to store and analyse large amounts of malware samples, aimed at enterprise and government security teams looking to collaborate and speed up analysis. Named Azul, the open-source platform comes with a…...
Macquarie brings agentic SRE to its digital bank
1+ week, 5+ day ago (750+ words) Macquarie's banking division is taking reliability cues from Google, adopting its site reliability engineering principles and using AI agents to enforce them. The effort is being spearheaded by divisional director and head of engineering excellence and reliability Phillip Grasso-Nguyen, a…...
Researchers find critical vulnerabilities in cloud-based password managers
1+ week, 6+ day ago (891+ words) Researchers at the Swiss Federal Institute of Technology (ETH Z'rich) have discovered serious vulnerabilities in popular, cloud-based password managers that allowed them to view and modify stored passphrases. The result was achieved despite vendors such as Bitwarden, Dashlane, and LastPass…...