SecurityBrief Australia - Technology news for CISOs & cybersecurity decision-makers
Australia

Advanced Persistent Threat (APT) Stories

Global Stories

Advanced Persistent Threat (APT) stories

Varist launches DICOM engine to spot hidden malware
Data Protection

Varist launches DICOM engine to spot hidden malware

Healthcare providers face a new malware route as Varist's engine scans DICOM, HL7 and FHIR files for hidden threats in imaging systems.

By Sofiah Nichole Salivio • 3 min read • Last week
Sygnia uncovers Velvet Ant breach dating back to 2016
Network Security

Sygnia uncovers Velvet Ant breach dating back to 2016

A near-decade of undetected access raises fresh concern after investigators found the group had hidden in a disconnected network since 2016.

By Sean Mitchell • 4 min read • Last week
Rapid Brigantine ties ClickFix malware to fake updates
Malware

Rapid Brigantine ties ClickFix malware to fake updates

BlueVoyant says a ClickFix malware campaign using fake browser updates is linked to the Rapid Brigantine ransomware ecosystem.

By Mark Tarre • 3 min read • Last week
New China-linked OP-512 cluster targets old IIS servers
Security Operations Centres

New China-linked OP-512 cluster targets old IIS servers

Older, internet-facing IIS servers are being singled out by China-linked hackers, with one new cluster able to persist despite partial containment.

By Sean Mitchell • 5 min read • This month
North Korea-linked hackers target developers via GitHub
Malware

North Korea-linked hackers target developers via GitHub

Nearly 100 organisations were hit in a six-week phishing spree that used GitHub repositories and Visual Studio Code tools to infect developers.

By Mark Tarre • 4 min read • This month
Technology firms become top cyber target in AI race
Data Protection

Technology firms become top cyber target in AI race

CrowdStrike said state-backed espionage and extortion are surging as AI assets inside tech groups draw hackers seeking code, models and access.

By Sofiah Nichole Salivio • 3 min read • This month
China-linked TA4922 expands attacks to Europe & Africa
Malware

China-linked TA4922 expands attacks to Europe & Africa

Businesses in Europe and Africa now face localised phishing and malware attacks from a suspected China-aligned group that has widened beyond Asia.

By Mark Tarre • 4 min read • This month
ESET links China-aligned hacks to oil, Syria & tech
Robotics

ESET links China-aligned hacks to oil, Syria & tech

The report says Chinese threat groups are now tracking oil, reconstruction and strategic technologies across Venezuela, Syria, South Korea and the Gulf.

By Sofiah Nichole Salivio • 4 min read • This month
Webworm targets European governments with Discord malware
Cloud Security

Webworm targets European governments with Discord malware

European ministries face a stealthier cyber-espionage campaign as Webworm shifts to Discord and Microsoft cloud tools to steal data.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Bitdefender finds FamousSparrow energy sector campaign
Supply Chain

Bitdefender finds FamousSparrow energy sector campaign

Repeat breaches exposed an Azerbaijani oil and gas operator to espionage as FamousSparrow exploited Microsoft Exchange flaws for two months.

By Sean Mitchell • 4 min read • Last month
Google says AI-powered cyberattacks are already here
Malware

Google says AI-powered cyberattacks are already here

AI is now being used to write exploits and malware, with Google saying it has traced the first zero-day linked to machine assistance.

By Joseph Gabriel Lagonsin • 5 min read • Last month
AI now routine in cyber attacks, Google report finds
Malware

AI now routine in cyber attacks, Google report finds

Security teams face a broader threat as criminals and state-backed actors use generative AI to speed hacks, phishing and malware.

By Joseph Gabriel Lagonsin • 4 min read • Last month
State actors target defence suppliers in long game
Firewalls

State actors target defence suppliers in long game

Small defence contractors are left exposed as state-backed hackers spend years mapping supply chains and laying covert access routes before striking.

By Joseph Gabriel Lagonsin • 5 min read • Last month
China-aligned TA416 resumes spying on EU & Mideast
Phishing

China-aligned TA416 resumes spying on EU & Mideast

Diplomatic missions in Europe and the Middle East face renewed PlugX-backed espionage as TA416 shifts tactics and targets amid regional tensions.

By Sean Mitchell • 4 min read • Tue, 7th Apr 2026
DeepLoad malware steals credentials via ClickFix campaign
Malware

DeepLoad malware steals credentials via ClickFix campaign

Businesses face credential theft and reinfection risks as DeepLoad hides inside trusted Windows processes and evades routine clean-up.

By Joseph Gabriel Lagonsin • 4 min read • Wed, 1st Apr 2026
Commvault adds threat-hunting tools to backup scans
Data Protection

Commvault adds threat-hunting tools to backup scans

Existing Threat Scan customers get new free tools to spot ransomware in backups before restoration, reducing the risk of reinfecting production systems.

By Mark Tarre • 3 min read • Tue, 31st Mar 2026

Stories from Other Regions

Advanced Persistent Threat (APT) stories

Collapsing grace period: When your adversaries never tire
Data Protection

Collapsing grace period: When your adversaries never tire

Attackers are now moving fast enough that patching delays, standing privilege and inherited trust leave organisations exposed within minutes.

By Chris Campbell • 7 min read • Last month
OT downtime costs firms up to GBP £5 million, survey finds
Malware

OT downtime costs firms up to GBP £5 million, survey finds

Operational technology outages are leaving most manufacturers and critical infrastructure firms facing losses of up to GBP £5 million, a survey found.

By Kaleah Salmon • 4 min read • Thu, 2nd Apr 2026