SecurityBrief Australia - Technology news for CISOs & cybersecurity decision-makers
Australia

Vishing Stories

Australian Stories

Vishing stories

Global Stories

Vishing stories

CypherLoc scam kit drives millions of browser attacks
Endpoint Protection

CypherLoc scam kit drives millions of browser attacks

Browser-based fraud is scaling fast, with Barracuda saying CypherLoc has driven about 2.8 million attacks since the start of 2026.

By Sean Mitchell • 3 min read • Last month
Gartner says 40% of governments will create TrustOps
Digital Transformation

Gartner says 40% of governments will create TrustOps

Deepfake threats are pushing public bodies to harden identity checks and governance, as Gartner forecasts dedicated TrustOps teams by 2028.

By Joseph Gabriel Lagonsin • 4 min read • Last month
QBE warns cyber attacks are speeding up in Asia-Pacific
Data Protection

QBE warns cyber attacks are speeding up in Asia-Pacific

Australia is increasingly in cyber criminals' sights as ransomware now reaches systems in minutes, leaving firms far less time to contain damage.

By Sean Mitchell • 4 min read • Last month
North Korea-linked hackers stole USD $2.02 billion
Software-as-a-Service

North Korea-linked hackers stole USD $2.02 billion

Losses from North Korea-linked digital asset theft jumped 51% in 2025, exposing banks and fintech firms to more identity-based intrusions.

By Sofiah Nichole Salivio • 3 min read • Last month
CyberCX report finds 29% of tests exposed severe flaws
Digital Transformation

CyberCX report finds 29% of tests exposed severe flaws

AI systems and social engineering tests proved especially risky, as CyberCX found severe weaknesses in half and 77% of cases respectively.

By Sean Mitchell • 4 min read • Last month
Why service desks are emerging as a critical security weakness
Virtual Private Networks

Why service desks are emerging as a critical security weakness

Attackers are exploiting help functions to reset credentials and bypass defences, putting entire networks at risk through a single call.

By Christopher Hills • 4 min read • Last month
Ransomware posts rise 22% as leak sites proliferate
Software-as-a-Service

Ransomware posts rise 22% as leak sites proliferate

Leak-site noise is making it harder for firms to tell real breaches from extortion theatre, as active sites hit 91 in the first quarter of 2026.

By Joseph Gabriel Lagonsin • 5 min read • Wed, 29th Apr 2026
Orange Business adds deepfake detection to services
Unified Communications

Orange Business adds deepfake detection to services

The move could help firms block synthetic impostors before payments or sensitive data are approved across voice, video and contact centre systems.

By Kaleah Salmon • 4 min read • Fri, 3rd Apr 2026
HPE report warns cyberattacks now run like big business
Malware

HPE report warns cyberattacks now run like big business

HPE warns cybercriminals now run attacks like global enterprises, using repeatable workflows, automation and AI to outpace defences.

By Joseph Gabriel Lagonsin • 4 min read • Wed, 18th Mar 2026
Cloud identity compromise now drives most cyber attacks
Malware

Cloud identity compromise now drives most cyber attacks

Cloud identity compromise now drives over 80% of cyber incidents, as attackers increasingly abuse trusted accounts and workplace tools.

By Shannon Williams • 4 min read • Fri, 13th Mar 2026
Salesforce guest flaws fuel large-scale data harvesting
Software-as-a-Service

Salesforce guest flaws fuel large-scale data harvesting

Misconfigured Salesforce Experience Cloud guest profiles are being exploited for mass data harvesting, with up to 400 firms possibly affected.

By Shannon Williams • 4 min read • Thu, 12th Mar 2026
ShinyHunters pivots to subdomain phishing & vishing
Software-as-a-Service

ShinyHunters pivots to subdomain phishing & vishing

ShinyHunters shifts to subdomain-brand phishing and vishing on mobiles, bypassing domain checks to hijack SSO logins and SaaS sessions.

By Catherine Knowles • 4 min read • Fri, 27th Feb 2026
Russian phishing service targets freight & logistics
Multi-factor authentication

Russian phishing service targets freight & logistics

Russian-run Diesel Vortex phishing service raided freight and logistics portals in the US and Europe, stealing over 1,600 login credentials.

By Sean Mitchell • 4 min read • Fri, 27th Feb 2026
Global telcos form London AI venture to fight spam calls
Firewalls

Global telcos form London AI venture to fight spam calls

Five global telecom operators launch London-based Syntelligence AI to build network-level tools tackling spam and scam calls worldwide.

By Sean Mitchell • 4 min read • Thu, 26th Feb 2026
AI-driven cyber threats grow as breakouts accelerate
Virtualisation

AI-driven cyber threats grow as breakouts accelerate

AI-fuelled ransomware, rapid cloud intrusions and identity abuse are transforming cyber risk, slashing response times for defenders.

By Joseph Gabriel Lagonsin • 5 min read • Thu, 26th Feb 2026

Stories from Other Regions

Vishing stories

Scam losses more than double as fraud hits consumers
Fintech

Scam losses more than double as fraud hits consumers

More consumers are losing larger sums to fraud as fake invoice and investment scams drive the biggest financial harm, F-Secure says.

By Sofiah Nichole Salivio • 4 min read • Last month
AI-fuelled scams tied to tariffs erode Canadians' trust
Mobile Device Management

AI-fuelled scams tied to tariffs erode Canadians' trust

AI-boosted scams piggybacking on tariff and cost-of-living fears are eroding Canadians' trust in everyday digital messages, Interac warns.

By Sofiah Nichole Salivio • 4 min read • Wed, 11th Mar 2026