Category: Cyber Security & Data Privacy

BBC and British Airways Affected By Payroll Data Breach

The BBC, British Airways (BA) and Boots all confirmed this week that the personal data of their staff has been exposed to hackers, following a ransomware incident impacting their payroll provider Zellis. A spokesperson for the BBC confirmed that the…
READ MORE
artificial intelligence

The Cybersecurity Concerns of AI

The newest trend in the field of Artificial Intelligence (AI) is the advancement of deep learning techniques and the emergence of more sophisticated models, such as GPT-3. Deep learning models are becoming increasingly capable of understanding and generating human-like text,…
READ MORE
SMEs cybersecurity

Why SMEs Should Invest In Cybersecurity

In today’s modern world, every enterprise should be concerned about cybersecurity and have access to protection from hackers, scammers, phishers, and bad actors around the world. In particular, small and medium-sized enterprises (SMEs) should invest in cybersecurity for several reasons,…
READ MORE
HTML attachments

Malicious HTML Email Attachments On The Rise

New research has shown that up to half of all HTML attachments sent via email are malicious, which is double the rate of 2022. “Malicious HTML is still being used by attackers because it works. Getting the right security in…
READ MORE
minecraft

Minecraft Clones Spread Dangerous Adware

A group of 38 Google Play Minecraft knockoff apps infected devices with the Android adware “HiddenAds” to secretly load adverts, making money for the games’ creators. Minecraft is a successful sandbox game with over 140 million active players monthly. About…
READ MORE
Home Affairs

Home Affairs’ Vulnerable To Hacking

A joint public accounts and audit committee hearing has revealed that the areas that Home Affairs are responsible for have tripled, while they have received no additional funding to cover the increased workload. This in turn has meant budget cuts,…
READ MORE
TikTok

What You Need To Know About TikTok and Cybersecurity

If you haven’t been living under a rock, you’ll know what TikTok is. If you haven’t, here is a brief rundown.  TikTok is a video-sharing app that allows users to create and share short-form videos on any topic. It’s mainly…
READ MORE
working remotely

The Security Risks of Working Remotely

Working remotely has become increasingly popular over the past few years, particularly during and post-Covid. While working remotely offers many benefits, it also comes with its own set of security risks. Some of the most common security risks of working…
READ MORE
myGov

The ACCC Warns Against myGov Scam

The Australian Competition and Consumer Commission (ACCC) has warned Australians against recent myGov email and text scams, with the intent behind these scams to “harvest login credentials to facilitate identity takeover and commit fraud”. “They may also use the fake…
READ MORE
cybersecurity

New Cybersecurity Agenda for the Federal Government

After the major Optus and Medibank data breaches of 2022, the Australian federal government is pursuing a new cybersecurity agenda. “For businesses these days, cybersecurity is as important as having a lock on the door”, said Prime Minister Anthony Albanese.…
READ MORE
AI

How Australian Companies Are Using AI and ML

One of the biggest trends in cybersecurity right now is the growing use of Artificial Intelligence (AI) and Machine Learning (ML) to improve security measures and responses, and many Australian companies are using this technology. AI and ML can be…
READ MORE
LastPass data breach

LastPass Data Breach As Cloud Storage Hacked

Password management company LastPass has suffered it’s second data breach in five months, after attackers gained access to customer data using information they had stolen from the previous breach in August 2022. LastPass Data Breach Statement LastPass CEO, Karim Toubba,…
READ MORE
Penetration testers

How Not To Respond To Penetration Testers In Your Network

As penetration testers, we’re used to getting caught. Getting caught tells us we’ve done our job, and the responders are evidently doing theirs. However, as I highlighted in my AusCERT Talk in 2020,  the recurring revenue and price point for…
READ MORE
AGL cyber incident

AGL Cyber Incident Affects Thousands

Australian energy provider AGL has been hit by a cyber incident on the “My Account” customer platform, affecting around 6,000 of it’s 4.2 million customers. “Based on current analysis it appears malicious actors have used stolen credentials acquired externally (such…
READ MORE
Medibank hack

Medibank Refuses To Pay Hackers For Stolen Data

The Australian Federal Police are assisting Medibank to contain the fallout after data pertaining to over 480,000 customers was hacked.  There is emerging evidence that sensitive health data leaked by cyber criminals is becoming more publicly available. The hackers have…
READ MORE
Uber Hack

Uber Hack Uses Slack Server To Taunt Employees

Stolen credentials were used by an 18 year-old hacker who bypassed Multi-Factor Authentification (MFA) protocols to access Uber’s Slack server and taunt Uber employees. The attack, which occurred in October 2022, combined stolen credentials, an MFA attack, and social engineering…
READ MORE
Optus data breach

Multiple Investigations Launched Following Optus Data Breach

The Office of the Australian Information Commissioner commenced an examination of the personal information handling practices of Optus and its parent company in early October, after the data breach that occurred on the 22 September 2022. The investigation will focus…
READ MORE
hack

Will Predictive Cyber Security Prevent A Cyber-Attack?

According to data on cyber-attacks gathered by the Hartford Steam Boiler and Insurance Company (HSB), a Connecticut-based firm that surveyed over a hundred risk managers, 9 out of 10 businesses in the US will experience at least one hacking incident…
READ MORE
microsoft

Authentication Errors Caused By Microsoft Patch Update

Microsoft has been alerting customers about the May 2022 patch update that is causing authentication errors and failures. The patch update has been linked to Windows Active Directory Domain Services, and Microsoft released an update advising that it was investigating…
READ MORE
cyber crime

Project REDSPICE and Australia’s Cybersecurity Investment

The Australian Federal Government has created a ten year plan which invests heavily in the cyber security sector. The government initially established a cyber security strategy in 2020, with the goal of ensuring full online security for individuals, businesses and…
READ MORE