SecurityBrief Australia - Technology news for CISOs & cybersecurity decision-makers
Australia

Enterprise security Stories

Global Stories

Enterprise security stories

Device code phishing surges across criminal toolkits
Ransomware

Device code phishing surges across criminal toolkits

The scams can hand attackers Microsoft 365 access, as new kits and services make device code phishing easier to run at scale.

By Mark Tarre • 5 min read • Today
Suprema launches BioStation 3 Max biometric terminal
Data Protection

Suprema launches BioStation 3 Max biometric terminal

With biometric terminals increasingly treated as networked endpoints, the device aims to cut tampering risk and ease large-site access control.

By Mark Tarre • 3 min read • Today
Keeper Security adds approval controls to KeeperPAM
Ransomware

Keeper Security adds approval controls to KeeperPAM

Approval-based access controls now give security teams tighter oversight of privileged accounts as AI agents expand the attack surface.

By Sean Mitchell • 4 min read • Today
Akamai buys LayerX to curb employee AI use in browsers
Software-as-a-Service

Akamai buys LayerX to curb employee AI use in browsers

The purchase adds browser-based AI controls to Akamai's security portfolio as firms scramble to monitor staff use of generative tools.

By Joseph Gabriel Lagonsin • 4 min read • Today
MySQL exposures & slow fixes plague firms, study finds
Digital Transformation

MySQL exposures & slow fixes plague firms, study finds

Nearly half of organisations are leaving risky ports and services open, with midmarket firms taking up to 56 days to fix exposures.

By Joseph Gabriel Lagonsin • 4 min read • Today
HackerOne & Wiz link validated findings to cloud risk
Digital Transformation

HackerOne & Wiz link validated findings to cloud risk

Security teams can now rank cloud flaws by exploitability and impact, as validated HackerOne reports feed directly into Wiz's risk graph.

By Sofiah Nichole Salivio • 3 min read • Today
VPNs & proxies feature in 94% of security incidents
Virtual Private Networks

VPNs & proxies feature in 94% of security incidents

More than nine in ten security incidents now involve anonymising services, leaving many organisations unable to spot malicious traffic in real time.

By Sofiah Nichole Salivio • 3 min read • Today
IRONSCALES gets Anthropic verification for email defence
Phishing

IRONSCALES gets Anthropic verification for email defence

Verified access to Anthropic's restricted AI tools could help IRONSCALES test email defences against more realistic phishing and impersonation attacks.

By Sean Mitchell • 4 min read • Today
Opswat named leader in G2 managed file transfer report
Data Protection

Opswat named leader in G2 managed file transfer report

Verified customer reviews have lifted the security vendor's MetaDefender Managed File Transfer into G2's Spring 2026 Leader tier.

By Sean Mitchell • 3 min read • Yesterday
Intruder finds exposed MySQL databases in 26% of firms
Ransomware

Intruder finds exposed MySQL databases in 26% of firms

The findings show many firms still leave internet-facing databases and admin tools open, giving attackers easy routes before flaws are even published.

By Sean Mitchell • 4 min read • Yesterday
ReliaQuest spots ClickFix attack using PySoxy proxy
Malware

ReliaQuest spots ClickFix attack using PySoxy proxy

The attack kept retrying for hours after network blocks, as a scheduled task and Python proxy preserved access on the host.

By Sean Mitchell • 4 min read • Yesterday
Tanium launches Atlas in APAC to speed IT response
Endpoint Protection

Tanium launches Atlas in APAC to speed IT response

Faster cyber attacks are forcing IT and security teams to act more quickly across large endpoint estates as Tanium expands its AI platform in APAC.

By Sean Mitchell • 4 min read • Yesterday
Microsoft unveils MDASH to find Windows security flaws
Network Security

Microsoft unveils MDASH to find Windows security flaws

The scanner found four critical remote code execution bugs among 16 Windows flaws, including issues in the kernel TCP/IP stack and IKEv2 service.

By Sean Mitchell • 4 min read • Yesterday
Securonix adds Threat Research Agent & ThreatWatch
Security Information and Event Management

Securonix adds Threat Research Agent & ThreatWatch

Security teams may cut manual reporting effort by up to 70 per cent as new tools help validate threats against internal logs and history.

By Joseph Gabriel Lagonsin • 3 min read • Yesterday
Google says AI-powered cyberattacks are already here
Malware

Google says AI-powered cyberattacks are already here

AI is now being used to write exploits and malware, with Google saying it has traced the first zero-day linked to machine assistance.

By Joseph Gabriel Lagonsin • 5 min read • Yesterday

Stories from Other Regions

Enterprise security stories

Upwind launches AI agentic pack for cloud security
Digital Transformation

Upwind launches AI agentic pack for cloud security

It aims to cut alert fatigue by using runtime data to validate threats, prioritise real risks and guide fixes across cloud and AI systems.

By Sofiah Nichole Salivio • 4 min read • Yesterday
Adam Dimopoulos joins as Chief Information Security Officer
Data Protection

Adam Dimopoulos joins as Chief Information Security Officer

The hire signals a sharper focus on resilience and customer trust as buyers demand stronger governance from identity security suppliers.

By Sofiah Nichole Salivio • 4 min read • Yesterday
What AI actually takes off the analyst's plate
Cloud Security

What AI actually takes off the analyst's plate

Analysts could gain time as AI systems shoulder evidence gathering, alert grouping and data translation, though humans still make final calls.

By Katrina Thompson • 4 min read • Yesterday