Northern Australia: so much economic wealth alongside so much disadvantage
The Australian’s reporting on the suffering of Indigenous children in Port Hedland should sicken everyone in this country. Three children...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched
Amazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four days ago. They're now being “broadly exploited” across...
Nuix launches agentic AI capability in Nuix Neo with audit trail
Nuix has launched the Nuix Neo AI Agent, a new capability aimed at helping investigators, legal teams, auditors, regulators and...
When thinking about national security, think about local businesses
The next national security crisis may expose a vulnerability that rarely appears in Australia’s strategic assessments: the disappearance of the...
EDPB Adopts Guidelines on the Interplay Between the DSA and the GDPR
On September 17, 2026, the European Data Protection Board (“EDPB”) adopted Guidelines 3/2025 on the interplay between the Digital Services...
Smashing Security podcast #489: How a brand new crypto wallet came with a spy inside
Imagine buying a brand new hardware wallet for your cryptocurrency with the shrink-wrap still on… what could possibly be hiding...
Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases
GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without...
LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
Ravie LakshmananOct 21, 2026Malware / Artificial Intelligence The popular LiteLLM Python package has been compromised as part of a software...
Critical PHP vulnerabilities allow remote execution
The Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) has issued an alert after the PHP Foundation provided advanced...
Australia’s foreign-investment gatekeeper needs defence expertise
A common misunderstanding is that governments need public support for big national security decisions. If a government waits for public backing,...
Remediation in the era of AI: Fix what matters first
if ( !emtpy($headline_subheadline ) ) : ?> AI is accelerating vulnerability discovery and exploitation, creating more threats than teams can...
The Patch Apocalypse is here. Patching everything isn’t the answer.
if ( !emtpy($headline_subheadline ) ) : ?> AI is shrinking the gap between vulnerability disclosure and exploitation from weeks to...
Rogue AI: When agents stop advising and start acting
if ( !emtpy($headline_subheadline ) ) : ?> Agentic AI can restart services, change configurations, and close tickets on its own....
AI isn’t hallucinating—but your data might be
if ( !emtpy($headline_subheadline ) ) : ?> Organizations blame AI models when outputs are inaccurate, but many hallucinations originate from...
Before you automate systems, decide which data wins
if ( !emtpy($headline_subheadline ) ) : ?> AI is only as effective as the information it relies on. Organizations pursuing...