In Pictures: Preemptive Security Rapid7 Melbourne roundtable
All rights reserved. This material may not be published, broadcast, rewritten or redistributed in any form without prior authorisation.Your use...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Plex2Shell Exploit Used to Turn Vulnerable Plex Servers Into Crypto Miners
Plex2Shell Exploit Used to Turn Vulnerable Plex Servers Into Crypto Miners Pierluigi Paganini October 19, 2026 Attackers exploit Plex2Shell flaws...
Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor
Ravie LakshmananOct 19, 2026Vulnerability / Web Security Threat actors have begun to exploit a chain of vulnerabilities in Plex Media...
Your Security Stack Knows Who Logged In. But Does It Know What AI Agents Do Next?
AI agents being evaluated by OpenAI escaped an isolated test environment and got into Hugging Face’s production infrastructure, though breaking...
Microsoft Edge Is Testing Restart-Free Security Updates: What Works Now
Microsoft has built a version of Edge that can install a security update while the browser stays open, keeping tabs...
Google Messages’ New Scam Protection Uses Cloud AI: What Happens to Your Privacy?
Google Messages is adding an optional Enhanced protection mode that sends conversation context from unknown senders to cloud-based Gemini models...
Eight US States Sue OpenAI Over Alleged ChatGPT Safety Risks to Children
OpenAI is facing lawsuits from eight US states accusing ChatGPT of putting children at risk while misleading families about its...
ConnectWise Cloud Backup application abused in cross-tenant token sweep
On October 15, 2026, Sophos X-Ops researchers identified a series of service principal sign-ins in which a threat actor authenticated...
Beyond the mailbox: Graph reconnaissance and ServiceNow user enumeration in a modern identity intrusion
Traditional business email compromise (BEC) is often thought of as a mailbox problem: a stolen account, unauthorized access to email,...
.png "Agentic AI’s first job in Australian healthcare is fixing the fragmented patient journey")
Agentic AI’s first job in Australian healthcare is fixing the fragmented patient journey
Australian GPs rank health system fragmentation and communication issues among their leading concerns for the future, according to the RACGP’s...
Plant alone isn’t enough: a defence factory is not a defence capability
Delivering Defence’s naval shipbuilding and sustainment requirements in Western Australia will depend on more than new investment and infrastructure. The...
OpenAI Engineer Accused of Spying on Executives Ordered to Remain in Custody
A judge ordered Abdulrahman Alfozan to remain in custody, likening the Saudi government’s offer to secure the former OpenAI engineer’s...
Edith Cowan University is building AI into its admissions process
Key points Edith Cowan University is building an AI system called 'AI Advantage', using Databricks technology, to help process around...
Ex-OpenAI employee accused of planting device appears to have Saudi backing
An ex-OpenAI engineer accused of planting a recording device in an executive conference room at the AI company appears to...
Top hyperscalers likely to have more AI-linked debt than now known
S&P Global estimates the world's biggest tech firms are likely to have more AI-linked liabilities than currently known, although its...