IT Brief Australia - Technology news for CIOs & IT decision-makers
Australia

Offensive Security Stories

Global Stories

Offensive Security stories

Mini Shai-Hulud worm turns public, NCC Group warns
Cloud Security

Mini Shai-Hulud worm turns public, NCC Group warns

Public release of the Mini Shai-Hulud code means copycat attacks can now hit developers, CI/CD systems and open-source supply chains.

By Sofiah Nichole Salivio • 4 min read • Last week
Organisations shift to continuous testing in security
Digital Transformation

Organisations shift to continuous testing in security

With AI speeding up attacks, 53% of security leaders say point-in-time tests are already outdated by the time reports land.

By Sean Mitchell • 4 min read • Last week
Anthropic's Claude Fable 5 sparks cybersecurity warnings
Data Protection

Anthropic's Claude Fable 5 sparks cybersecurity warnings

Cybersecurity teams fear the release could speed up vulnerability hunting on both sides, forcing faster patching and tighter controls.

By Sean Mitchell • 5 min read • This month
How continuous assurance can strengthen cyber security in the AI era
Hybrid Cloud

How continuous assurance can strengthen cyber security in the AI era

Periodic penetration tests miss most systems, prompting Australian and New Zealand firms to use AI-driven checks for broader coverage and faster risk spotting.

By Gareth Cox • 3 min read • This month
Synack expands CREST pathways with two new certifications
Data Protection

Synack expands CREST pathways with two new certifications

Security buyers get a stronger benchmark as CREST-certified testers gain faster access to Synack's vetted red team for client engagements.

By Sean Mitchell • 4 min read • This month
EC-Council launches Hackers4Humanity to fund training
AI Security

EC-Council launches Hackers4Humanity to fund training

Passes in a sponsored hacking exam will trigger USD $1,000 in training credits for underserved communities, with up to USD $1 million on offer.

By Sofiah Nichole Salivio • 3 min read • This month
Cyber chiefs trust controls, but few have tested them
Network Security

Cyber chiefs trust controls, but few have tested them

Only 12% of chief information security officers have recently validated controls they expect to stop intruders moving sideways through networks.

By Joseph Gabriel Lagonsin • 4 min read • This month
Ransomware attacks fall in April as The Gentlemen rise
Malware

Ransomware attacks fall in April as The Gentlemen rise

Industrials remained the main target as the monthly ransomware total eased 7%, even as The Gentlemen surged to second place among active gangs.

By Sofiah Nichole Salivio • 4 min read • This month
eSentire adds offensive AI features & names cyber chief
Security Operations Centres

eSentire adds offensive AI features & names cyber chief

Security teams face faster attack cycles as eSentire extends Atlas with agentic AI and appoints Ilan Mindel as Chief Cyber Officer.

By Sofiah Nichole Salivio • 4 min read • This month
Check Point launches AI tool to test exploitability
Cloud Security

Check Point launches AI tool to test exploitability

Security teams could cut alert backlogs as the new system flags only flaws that can be exploited in a specific environment.

By Sean Mitchell • 4 min read • Last month
Terra adds continuous testing for network infrastructure
Network Infrastructure

Terra adds continuous testing for network infrastructure

Security teams can now assess network, web and AI weaknesses together as Terra Security broadens continuous validation to infrastructure.

By Mark Tarre • 4 min read • Last month
Exploitation overtakes social engineering in Rapid7 report
Ransomware

Exploitation overtakes social engineering in Rapid7 report

Exposed systems are becoming the main target, as Rapid7 says flaws were used in 38% of incidents and patch windows shrank to five days.

By Mark Tarre • 3 min read • Last month
TrendAI expands bug bounty to cover AI vulnerabilities
Digital Transformation

TrendAI expands bug bounty to cover AI vulnerabilities

The move widens defences for businesses as AI systems become a bigger target for attackers and zero-day flaws multiply across enterprise software.

By Mark Tarre • 3 min read • Last month
AI security training surges as prompt injection tops list
Security Operations Centres

AI security training surges as prompt injection tops list

AI-related training is shifting as prompt injection, model exploitation and agent hijacking shape how security teams prepare for live attacks.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Anthropic model can chain bugs into exploits, Cloudflare
Cloud Security

Anthropic model can chain bugs into exploits, Cloudflare

The findings suggest AI-assisted bug hunting is edging closer to practical exploitation, raising the stakes for software teams racing to patch flaws.

By Mark Tarre • 4 min read • Last month

Stories from Other Regions

Offensive Security stories

Horizon3.ai & Brinqa team up on exposure management
Hybrid Cloud

Horizon3.ai & Brinqa team up on exposure management

Enterprises could cut remediation noise as attacker-validated findings are ranked against business context, ownership and exploit paths.

By Joseph Gabriel Lagonsin • 4 min read • This month
UltraViolet Cyber launches Solstice AI pentesting platform
Application Security

UltraViolet Cyber launches Solstice AI pentesting platform

The platform aims to speed application security reviews by about 20% while keeping expert testers in charge of final findings.

By Joseph Gabriel Lagonsin • 4 min read • This month
Ocean raises GBP £28 million to fight AI email fraud
Data Protection

Ocean raises GBP £28 million to fight AI email fraud

AI-written phishing is forcing security teams to rethink email defences as Ocean claims its system already scans more than one billion messages a month.

By Sean Mitchell • 4 min read • Last month