Following the sentencing of two young men for the 2024 Transport for London (TfL) hack, senior police officers have said the case makes a compelling argument for tougher legal powers in the UK, namely Cybercrime Risk Orders (CCROs). Owen Flowers,… Read More "Police Chiefs Cite TfL Hack in Push for Cybercrime Risk Orders"
The biggest data breaches in Australia now stretch well past the Optus and Medibank era, and as of July 2026 the 23 largest and most consequential incidents range from the Ticketmaster and Live Nation Snowflake campaign, Canva, Latitude, and MediSecure… Read More "23 Biggest Data Breaches in Australia (Updated July 2026)"
Generative AI has fundamentally altered the social engineering threat landscape. Historically, Security Operations Center (SOC) analysts and end users relied on recognizable indicators to identify phishing emails, such as poor grammar, generic greetings, suspicious sender domains, and clumsy formatting. Today,… Read More "AI-Driven Social Engineering: How SOCs Detect and Block Next-Gen Phishing"
Here’s how open-source intelligence helps trace your digital footprint and uncover your weak points, plus a few essential tools to connect the dots 20 Nov 2025 • , 5 min. read Whatever the reason, we spend vast amounts of time… Read More "The OSINT playbook: Find your weak spots before attackers do"
A newly identified Windows malware sample abuses Microsoft Graph API to transform a compromised Microsoft 365 calendar into a covert two-way command and control (C2) channel. Researchers at Group-IB dubbed the highly sophisticated malware sample HollowGraph and attributed it, with high… Read More "New HollowGraph Malware Hijacks Microsoft 365 Calendars for Covert C2"
Why your business needs the best-of-breed combination of technology and human expertise 24 Nov 2025 • , 4 min. read When I was in my mid-teens, I decided to get a job in a small local garage to learn how… Read More "MDR is the answer – now, what’s the question?"
Security researchers at Searchlight Cyber have used OpenAI’s GPT5.6 Sol Ultra to successfully develop a full exploit chain for two critical WordPress Core vulnerabilities. The first vulnerability, tracked as CVE-2026-63030 is a critical REST API batch endpoint route confusion issue… Read More "Researchers Build WordPress Exploit Using OpenAI’s GPT"
Thousands of data centers are at risk of compromise due to a 22-year-old vulnerability in Baseboard Management Controller (BMC) management processors, data center security firm Lava reports. Found in most server platforms, BMCs enable server management operations even without a… Read More "Decades-Old BMC Vulnerability Exposes Thousands of Data Centers to Attacks"
Social media influencers can provide reach and trust for scams and malware distribution. Robust account protection is key to stopping the fraudsters. 25 Nov 2025 • , 4 min. read It’s not an easy time to be an influencer. Brands… Read More "Influencers in the crosshairs: How cybercriminals are targeting content creators"
The agentic operator documented as the first ransomware campaign run end-to-end by a large language model (LLM) has returned with a purpose-built locker designed to destroy trained AI model artifacts. According to new research from the Sysdig Threat Research Team (TRT)… Read More "JadePuffer Returns With Ransomware Designed to Wipe AI Models"
