SecurityBrief Australia - Technology news for CISOs & cybersecurity decision-makers
Australia

OAuth Stories

Australian Stories

OAuth stories

Global Stories

OAuth stories

Barracuda spots blob URL phishing in Microsoft browser
Multi-factor authentication

Barracuda spots blob URL phishing in Microsoft browser

Security teams may miss the attack because it leaves no persistent phishing site, instead building fake Microsoft login pages inside the browser.

By Sean Mitchell • 4 min read • This month
Four in five AI tools lack IT oversight, Reco finds
Data Protection

Four in five AI tools lack IT oversight, Reco finds

Enterprise teams are exposing data and workflow systems as AI agents spread without approval, leaving most tools outside IT control.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Okta launches Agent SSO to manage enterprise AI agent access
Identity and Access Management

Okta launches Agent SSO to manage enterprise AI agent access

The launch aims to curb unsecured AI tool access by giving companies central identity controls for agents already handling workplace tasks.

By Mark Tarre • 5 min read • Last month
Google flags Russian spies abusing real login features
Malware

Google flags Russian spies abusing real login features

Personal accounts used by researchers and officials are being hit by Russian-linked groups, exposing institutions to stealthy account theft and malware.

By Joseph Gabriel Lagonsin • 5 min read • Last month
Google Cloud warns startups on AI scaling pitfalls
Cloud Security

Google Cloud warns startups on AI scaling pitfalls

Startups risk leaked keys, quota throttling and surprise bills unless they tighten controls as AI prototypes move into production.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Google links Looker to Gemini Enterprise for chat data
Software-as-a-Service

Google links Looker to Gemini Enterprise for chat data

Employees can now query governed business metrics and documents in one chat, while Looker permissions still apply in Gemini Enterprise.

By Mark Tarre • 4 min read • Last month
BeyondTrust adds AI identity controls to Pathfinder
Privileged Access Management

BeyondTrust adds AI identity controls to Pathfinder

Security teams must now track AI agents and machine accounts as well as staff, as BeyondTrust expands Pathfinder to cover privileged access.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Reco named OpenAI Select Partner amid AI security concerns
Software-as-a-Service

Reco named OpenAI Select Partner amid AI security concerns

Enterprise security teams face fresh oversight burdens as Reco joins OpenAI's partner network to monitor agent access and permissions.

By Joseph Gabriel Lagonsin • 4 min read • Sat, 1st Aug 2026
Attackers exploit trusted credentials in email fraud surge
Software-as-a-Service

Attackers exploit trusted credentials in email fraud surge

Email fraud is now the top incident type, accounting for 45% of cases as attackers bypass multi-factor authentication with stolen credentials.

By Mark Tarre • 4 min read • Mon, 27th Jul 2026
APT28-linked campaign hijacks hotel Wi-Fi for logins
Virtual Private Networks

APT28-linked campaign hijacks hotel Wi-Fi for logins

Corporate travellers at hotels and conference centres were quietly sent to fake Microsoft 365 pages after attackers took over guest Wi-Fi gateways.

By Joseph Gabriel Lagonsin • 4 min read • Mon, 27th Jul 2026
ThreatDown adds shadow AI & identity tracking tools
Digital Transformation

ThreatDown adds shadow AI & identity tracking tools

Security teams face higher breach costs as ThreatDown expands visibility over unsanctioned AI tools and machine accounts in one console.

By Mark Tarre • 4 min read • Fri, 24th Jul 2026
Salt Security expands Policy Hub to 100 AI policies
Data Protection

Salt Security expands Policy Hub to 100 AI policies

Enterprise teams can now switch on controls for AI agents and APIs faster, with Salt Security bundling 100 pre-built policies into its Policy Hub.

By Mark Tarre • 4 min read • Wed, 22nd Jul 2026
Phishing toolkits target Microsoft 365 MFA in surge
Multi-factor authentication

Phishing toolkits target Microsoft 365 MFA in surge

Account takeovers are becoming harder to stop as attackers use real-time code theft and fake login pages to bypass Microsoft 365 MFA.

By Mark Tarre • 5 min read • Wed, 15th Jul 2026
Proofpoint spots Entra ID spoofing attack technique
Network Security

Proofpoint spots Entra ID spoofing attack technique

Attackers can now probe Entra ID accounts and passwords at scale without a real app, leaving defenders with little sign-in telemetry.

By Sean Mitchell • 4 min read • Wed, 15th Jul 2026
AWS Builder Centre expands with free sandbox workshops
Software-as-a-Service

AWS Builder Centre expands with free sandbox workshops

Free workshop sandboxes should make it easier for developers to try AWS training without a personal account, credit card or cleanup.

By Sean Mitchell • 5 min read • Tue, 14th Jul 2026

Stories from Other Regions

OAuth stories

Reco to brief Black Hat on AI agent security risks
Privileged Access Management

Reco to brief Black Hat on AI agent security risks

Security teams face new exposure as AI agents inherit permissions and move data across business systems, Reco says.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Ransomware victims surge to 7,551 as attacks fragment
Software-as-a-Service

Ransomware victims surge to 7,551 as attacks fragment

Ransomware attacks spread through vendor systems and AI-aided tactics, leaving 7,551 publicly disclosed victims in the latest 12-month period.

By Sean Mitchell • 4 min read • Fri, 24th Jul 2026