Russian help would make North Korea’s missile-test flurry worse news
One of the biggest concerns is that Russia may have helped. North Korea has conducted a flurry of missile tests...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
Ravie LakshmananOct 27, 2026Vulnerability / Web Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation...
Pause the disposal of Victoria Barracks Sydney
The Australian government should pause disposal for historic Victoria Barracks in Sydney and take time to resolve outstanding questions before...
Fixes for Google Brotli flaw arrive for Microsoft .NET, PHP and Linux
Key points Microsoft and the PHP project have released fixes for the Google Brotli decoder flaw, CVE-2026-111497, after Node.js patched...
ASD report flags AI-enabled cyber threats as incidents and business losses rise
Australia’s cyber threat environment is becoming increasingly complex as artificial intelligence accelerates malicious activity, cybercrime losses rise and state-sponsored actors...
Cisco Rethinks Privileged Infrastructure Access
Advanced persistent threats were once the domain of highly skilled and well-funded attackers. Infrastructure teams could realistically deploy “good enough”...
Magento Campaign Infects 953 Online Stores Across Five Domains
Magento Campaign Infects 953 Online Stores Across Five Domains Pierluigi Paganini October 26, 2026 Sansec tracks a Magento skimmer campaign...
Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento
Ravie LakshmananOct 26, 2026Malware / Web Security An unknown threat actor has infected 953 online stores, most of them running...
To secure supply, Australia needs to engage with Africa’s mineral sovereignty
Africa’s push for greater control over its minerals is a national security question for Australia, not just a commercial one...
Parliamentary Information and Cyber Resilience upgrade has $40m budget
Key points The Parliamentary Information and Cyber Resilience project has a budget of $40 million over four years, Nicola Hinder...
Japanese companies compensate users as cyberattacks buffet economy
Japanese companies are moving to pay compensation to users following waves of cyberattacks that have disrupted internet services and raised...
Anthropic’s soaring sales, steep losses put AI frenzy to IPO test
Anthropic has taken a big step closer to a potentially record-breaking IPO, even as it revealed steep losses and security...
Ransomware Recovery Readiness: The Board Questions That Prove You Can Recover
Last Updated: 23 October 2026 Executive summary Ransomware recovery readiness should be judged by demonstrated business recovery, not by the...
AI-Generated Fake Bank Calls and NFC App Enabled €380,000 Fraud, Dutch Police Say
AI-Generated Fake Bank Calls and NFC App Enabled €380,000 Fraud, Dutch Police Say Pierluigi Paganini October 26, 2026 Dutch police...
Researchers Uncover Rentable Android Spyware uCreater Targeting WeChat and Telegram
Researchers Uncover Rentable Android Spyware uCreater Targeting WeChat and Telegram Pierluigi Paganini October 26, 2026 uCreater is Android spyware disguised...