Infosec stories
It aims to curb staff data leaks into public AI tools by giving Australian employers visibility and controls over what workers share.
Local firms in regulated sectors can now keep identity security data onshore as scrutiny over machine and AI access intensifies.
Phishing campaigns are increasingly targeting credentials, payments and malware delivery, with Microsoft alone accounting for 22% of brand impersonation attempts.
Customers will gain earlier warnings on phishing and impersonation as Infoblox folds Axur's web, app and dark web scanning into its security tools.
Businesses may win lower premiums as live security data replaces self-reported forms in a new cyber insurance model for Qualys users.
AI-driven attacks are exposing weak passwords on cameras and access controls, prompting calls for stricter governance across physical security systems.
AI has made stolen credentials and careless copy-paste habits a bigger risk than password strength, with scams and breaches accelerating.
Recurring checks aim to help regulated firms spot compliance gaps in outsourced and in-house operations before breaches trigger penalties.
Session cookie theft lets attackers slip past multifactor checks, putting enterprise email accounts at risk even after login.
Web attacks are driving browser makers to bake security in by default, as Norton Neo adds VPN, phishing blocks and anti-fingerprinting tools.
Rising identity-based attacks are pushing Australian and New Zealand businesses to seek faster recovery tools for Active Directory and hybrid systems.
QR code phishing climbed sharply in the quarter, exposing email users to more mobile-led credential theft despite disruption of major infrastructure.
Businesses can now run supplier, tax and sanctions checks through AI tools, as apexanalytix opens access to more than 280 million records.
Security chiefs say AI agents and credential theft are making password-only defences too risky as World Password Day returns.
Broader attacker activity is increasingly moving beyond stolen credentials, even as identity still accounted for 58.7% of incidents in Q1 2026.
Only about 10% of APAC organisations say their identity systems can fully secure AI agents, bots and service accounts.
A flaw in a widely watched Microsoft repository could have let attackers run code and steal secrets through GitHub Actions, Tenable said.
Its general release gives IT teams a single place to monitor and secure AI agents as shadow deployments spread across workplace software and cloud tools.
Threats are spreading beyond inboxes as phishing shifts into Teams, calendars and other collaboration tools, raising the risk for hybrid workers.
Attackers are exploiting help functions to reset credentials and bypass defences, putting entire networks at risk through a single call.
