SecurityBrief Australia - Technology news for CISOs & cybersecurity decision-makers
Australia

Supply Chain Security Stories

Australian Stories

Supply Chain Security stories

Global Stories

Supply Chain Security stories

Google Cloud urges stronger cyber basics amid AI attacks
Malware

Google Cloud urges stronger cyber basics amid AI attacks

As attackers use AI to speed up phishing and malware, companies are being told that multi-factor authentication and patching matter more than ever.

By Mark Tarre • 4 min read • Yesterday
Public exploit code targets Cudy router flaw chain
Network Security

Public exploit code targets Cudy router flaw chain

Patching is urgent for Cudy WR3000 rev 2.0 routers, as public code shows how two flaws can let attackers gain root command execution.

By Sean Mitchell • 5 min read • Yesterday
Iranian-linked cyber attack exposes UK energy flaws
Supply Chain

Iranian-linked cyber attack exposes UK energy flaws

Small operators across Britain's power network may share the same weak points after the outage, experts warn, despite no grid-wide disruption.

By Sofiah Nichole Salivio • 6 min read • Yesterday
TrendAI adopts Claude Opus 5 for vulnerability triage
Data Protection

TrendAI adopts Claude Opus 5 for vulnerability triage

Security teams could cut exposure faster as the model helps rank exploitable flaws and apply temporary defences before vendor fixes arrive.

By Sean Mitchell • 4 min read • 2 days ago
NVIDIA, SAP back OpenBao as secrets tool gains ground
DevOps

NVIDIA, SAP back OpenBao as secrets tool gains ground

Growing use by major tech groups is helping open source secrets manager OpenBao win trust as cloud and AI credential risks mount.

By Mark Tarre • 4 min read • 2 days ago
GitLab adds enterprise controls for agentic AI tools
DevOps

GitLab adds enterprise controls for agentic AI tools

Regulated teams can now keep AI processing inside GitLab Dedicated, with new secret handling, spending caps and security fixes added in 19.3.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Fortinet buys Virtue AI to boost AI security tools
Data Protection

Fortinet buys Virtue AI to boost AI security tools

The deal extends Fortinet's reach into AI runtime protection as companies race to secure agents, models and tools across production systems.

By Joseph Gabriel Lagonsin • 3 min read • Last week
Asia Pacific leaders urge overhaul of scam defences
Data Protection

Asia Pacific leaders urge overhaul of scam defences

Australia's new scams rules are adding pressure on firms to detect fraud faster as AI-powered attacks expose weak governance and identity controls.

By Sofiah Nichole Salivio • 4 min read • Last week
AI models expose new attack surfaces through misconfiguration
Ransomware

AI models expose new attack surfaces through misconfiguration

Misconfigured models are giving attackers a fresh route into cloud systems, raising the risk of data theft and service compromise.

By Anthony Caruana • 5 min read • Last week
OpenSSL conference 2026 to focus on post-quantum security
Cloud Security

OpenSSL conference 2026 to focus on post-quantum security

Businesses could face years of costly upgrades as OpenSSL brings developers and policymakers together in Prague to plot post-quantum encryption.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Prem launches CyberScan for Bitcoin security audits
Data Protection

Prem launches CyberScan for Bitcoin security audits

The new tool aims to catch Bitcoin software flaws between formal audits after a regression led to more than USD $116 million stolen.

By Sofiah Nichole Salivio • 4 min read • Last week
Endor Labs adds buildless C support to AI SAST tool
Application Security

Endor Labs adds buildless C support to AI SAST tool

Developers can now scan C code earlier in the process, as Endor Labs says its buildless AI SAST found 96 of 102 known bugs in tests.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Vercel launches public bounty to test sandbox escape
Virtualisation

Vercel launches public bounty to test sandbox escape

Researchers can claim up to USD $1 million for breaking Vercel Sandbox's isolation, as the cloud provider opens its boundary to public scrutiny.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Mid-market firms account for 73% of ransomware victims
Data Protection

Mid-market firms account for 73% of ransomware victims

Ransomware groups are keeping up pressure on smaller rivals, with mid-market firms still making up 73% of victims across North America and Europe.

By Joseph Gabriel Lagonsin • 4 min read • Last week

Stories from Other Regions

Supply Chain Security stories

Most UK retailers hit by AI security incidents, survey finds
Data Protection

Most UK retailers hit by AI security incidents, survey finds

Nearly 60% of big UK retailers reported AI security incidents last year as rapid adoption outpaced governance and risk checks.

By Mark Tarre • 4 min read • 2 days ago
CleanStart expands Middle East, Africa security push
Digital Transformation

CleanStart expands Middle East, Africa security push

Rising use of AI coding tools is widening software supply-chain risks for businesses across the Middle East, Türkiye and Africa.

By Sofiah Nichole Salivio • 4 min read • Last week
Harness launches AI security agents to speed fixes
Cloud Security

Harness launches AI security agents to speed fixes

The new tools aim to cut the gap between finding a flaw and fixing it from weeks to hours as attacks accelerate.

By Mark Tarre • 4 min read • Last week