An OpenAI Agent Hacked Australia’s Health Service. Their Government Found Out Months Later
The country’s prime minister expressed disappointment at being informed of the hack only via email. Now Australia is investigating whether...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
OpenAI Agent Bypassed an Australian Government Health Portal During Internal Research
OpenAI Agent Bypassed an Australian Government Health Portal During Internal Research Pierluigi Paganini September 24, 2026 OpenAI’s AI agent bypassed...
CLOSEDQUORUM, the malware that asks four AI models what to do next
CLOSEDQUORUM, the malware that asks four AI models what to do next Pierluigi Paganini September 24, 2026 Cisco Talos finds...
Malicious npm Packages That Evade Defenses
Malicious npm Packages That Evade Defenses This is an impressive piece of malware. Its sophistication says nation-state to me, but...
8 cool things Copilot can do in Word
if ( !emtpy($headline_subheadline ) ) : ?> AI-generated text? Yawn. Learn how Copilot can be truly useful in Word. endif;...
17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360
ClickFix has become the most common way attackers get into enterprise networks, and it does it without an exploit, an...
OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files
An AI agent on an internal OpenAI research task bypassed access controls on an Australian government Medicare statistics portal in...
TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords
Ravie LakshmananSep 24, 2026Cloud Security / Identity Security Cybersecurity researchers have disclosed details of an active TeamFiltration campaign codenamed UNK_CondorFiltration...
Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure
Ravie LakshmananSep 24, 2026Vulnerability / Web Security Threat actors have begun to actively exploit a critical security flaw in WordPress...
Australia and Canada face similar northern logistics problems
Australia and Canada are separated by half a world, but a new defence partnership is exposing an unexpected similarity. Canada...
U.S. CISA adds Check Point, Arista VeloCloud Orchestrator, and F5 BIG-IP APM flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Check Point, Arista VeloCloud Orchestrator, and F5 BIG-IP APM flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini...
F5 BIG-IP APM Zero-Day Exploited in Zero-Day RCE Attacks
F5 BIG-IP APM Zero-Day Exploited in Zero-Day RCE Attacks Pierluigi Paganini September 23, 2026 F5 warns of a critical BIG-IP...
The Rising Threat of Deepfakes: Why Organizations Must Rethink Trust
This article is part of an ongoing series from Sophos frontline security operations specialists, sharing the expertise they use to...
Vocus plans fibre link between Brisbane and Darwin
Key points Vocus is building a long-haul fibre cable linking Brisbane, Townsville and Darwin as part of its Australian Digital...
Australia’s next class war may be fought over reality
Australia’s next class war may not principally be fought over wealth, but over truth.For most of modern history, democratic societies...