APRA takes action against Medibank for data breach

The Australian Prudential and Regulation Authority (APRA) has imposed an extra $250m requirement in Medibank’s capital adequacy requirement. Medibank Private, a health insurance provider, suffered a data breach in October 2022 which resulted in the compromise of...

Australia’s First Cyber Security Coordinator Announced

The Australian Federal Cabinet signed off on the appointment of the government’s first co-ordinator of cybersecurity. Following the major cyber-attacks against Optus and Medibank, the Home Affairs Minister had raised concerns that there was no functional cyber...

Apple Releases Fixes For Zero Day Vulnerabilities

Apple has just released a patch which addresses three new zero-day vulnerabilities exploited in attacks installing the triangulation spyware. It’s a zero-interaction vulnerability that is delivered by iMessage which allows attacks to steal data from your device....

Medibank Staff Details Breached due to MOVEit Vulnerability

Medibank has suffered another data breach. The Australian private health insurer suffered a major cyber-attack in October last year affecting 9.7 million customers. It was one of Australia’s worst data breach. This time its staff’s private details were impacted...

New Sextortion Scheme Using Deepfakes

Sextortion is a form of blackmail where malicious actors threaten to publicly leak explicit images and videos of their targets. This scheme is resulting in millions of dollars in losses and normally involves the threat actor coercing or stealing the digital materials...

Hunter Valley Bus Tragedy Scams Spotted

Early this week, there was a tragic bus accident in NSW’s Hunter Valley region. A bus, which was returning from a local wedding, overturned, killing 10 people and injuring a further 14. Following the accident, scammers wasted no time in targeting unsuspecting...

Using ChatGPT to Solve Secure Programming Challenges

Hamza from Security Dimension recently ran an experiment to determine if ChatGPT is up to the challenge of tackling security vulnerabilities in code. He tried to get solve a secure programming challenge in Cross Site Scripting in both Python and JavaScript. His...