Passwords stories
AI-generated phishing is making employee vigilance less reliable, pushing organisations towards passkeys and phishing-resistant multi-factor authentication.
Australian firms remain exposed as 43% reported AI-driven phishing attacks in the past year, while many staff still log in with passwords.
Public profile details are helping criminals guess passwords and impersonate contacts, with 55% of Australians reusing the same password.
Australians feel confident spotting cyber threats, but most still reuse passwords, share logins and ignore breaches unless directly alerted.
Even small firms can cut breach risk sharply by enforcing passwords, MFA, phishing checks and patching, CISA says.
Security teams are being pushed to monitor AI activity across systems, as executives warn that unsanctioned tools and hidden agents are outpacing governance.
SMBs face rising breach risk as the report says seven routine security failings, not advanced malware, drive most attacks, with ransomware in 88% of cases.
Nearly one in 10 AI security alerts in retail involved systems exposing protected customer data to users without access, research found.
Boards are being told that identity controls and staff training must catch up as AI makes phishing, impersonation and account takeovers harder to spot.
Independent recognition in two analyst reports bolsters Keeper's case for unified identity security as firms struggle with disconnected tools.
Smaller firms face faster and costlier breaches as AI cuts the time hackers need to exploit software flaws from weeks to hours.
Australian businesses and users face rising account-takeover risk as experts say AI-driven attacks and leaked credentials have outpaced passwords.
Weak logins are still putting power grids, hospitals and water systems at risk as experts mark World Password Day with fresh warnings.
Agentic AI promises effortless digital delegation, but its admin-level access to data and systems creates profound privacy and security risks.
Even at Google, only 28% of measured logins used passkeys, underscoring the gap between offering passwordless sign-in and getting users to adopt it.
Despite leading on passkeys and MFA, Indian firms still face widespread AI phishing and deepfake scams that are undermining daily security practice.
A recent government breach has exposed a wider gap in cyber awareness, with stolen personal data sold online for as little as GBP £5.
Enterprise admins can now approve vault access and share credentials inside ServiceNow, reducing manual steps for security teams and auditors.
Businesses are being urged to replace password-only logins as stolen credentials still feature in 22% of confirmed breaches.
Two-thirds of UK digital investors risk locking away wealth, as most leave no clear instructions for others to access online assets.