Optus Breach Due to Skilled Cyber Criminal

The Sydney Morning Herald has reported that the chief executive of Optus has maintained that the cyberattack on her organisation in September last year was perpetrated by a skilled cybercriminal. She said that the attacker had knowledge of Optus’ systems and cycled...

Top 10 Open Source Software Risks of 2023

Endor Labs, in collaboration with 20 CISOs and technology veterans have identified the top 10 open source risks of 2023. They are: 1. Known vulnerabilities. – Where developers accidentally introduce a component that contains vulnerable code 2. Compromise of...

Android March Updates Addresses Two Critical Vulnerabilities

Google has released its March 2023 security updates for Android. The update addresses 60 flaws including two critical-severity remote code execution vulnerabilities. The two flaws are tracked as CVE-2023-20951 and CVE-2023-20954. Google is currently withholding...

Typo Squatting Campaign to Steal Crypto

Over 450 malicious python packages were discovered to use typo squatting to steal crypto. The threat actor is using between 13 and 38 typosquatting versions for popular packages to cover a broad range of mistakes that would result in downloading the malicious package....

Medibank Breach Due to Rookie Mistake

In its half yearly report, Australian health insurer Medibank shared a brief outline of how Russian based attackers got access to personal details of all 9.7 million of its customers. The Medibank breach in 2022 is one of the largest in Australian history. Hackers...

Worrying Upward Trend in Australian Data Breach Notifications

The Office of the Australian Information Commissioner (OAIC) has just published statistical information about notifications received under the Notifiable Data Breached (NDV) Scheme from 1 July to 31 December 2022. It had received 497 notifications, which is up 26%....