CFOtech Australia - Technology news for CFOs & financial decision-makers
Australia

Data exfiltration Stories

Australian Stories

Data exfiltration stories

Why insider threats are still Australia's most under-managed risk
Data Protection

Why insider threats are still Australia's most under-managed risk

Australian firms are leaving staff and contractors with excessive access, making insider incidents harder to spot, report and contain.

By Maxime Cousseau • 4 min read • This month
SentinelOne brings Prompt Security to AWS Sydney for AI sovereignty
Data Protection

SentinelOne brings Prompt Security to AWS Sydney for AI sovereignty

Local hosting in Sydney eases compliance worries for Australian firms using AI tools that may expose prompts, code and credentials.

By Mark Tarre • 4 min read • This month
AI gives criminals speed boost, but basic security failures persist
Ransomware

AI gives criminals speed boost, but basic security failures persist

Australian firms still face email compromise and poor security hygiene, even as AI helps criminals move faster and hide harder.

By David Shilovsky • 6 min read • Last month

Global Stories

Data exfiltration stories

Bank blocks confidential data leaks to public AI tools
Data Protection

Bank blocks confidential data leaks to public AI tools

Hundreds of attempted uploads were stopped as a regional investment bank moved to curb analysts' use of public AI tools for sensitive data.

By Karen Joy Bacudo • 4 min read • Last week
AI security incidents expose new criminal tradeoffs
Malware

AI security incidents expose new criminal tradeoffs

Criminals are increasingly using AI for ransomware and credential theft, while flaws in test models are exposing production systems and data.

By Joseph Gabriel Lagonsin • 5 min read • 3 days ago
Mandiant warns of AI agents fuelling new attack risks
Software-as-a-Service

Mandiant warns of AI agents fuelling new attack risks

Autonomous systems are now creating fresh avenues for code theft, remote execution and runaway cloud spending, Mandiant says.

By Sean Mitchell • 3 min read • Last week
CrowdStrike links PhantomRaven malware to bug bounty hunter
Malware

CrowdStrike links PhantomRaven malware to bug bounty hunter

The stealer's use of typosquatted npm packages has raised fears that bug bounty channels are being abused to monetise stolen developer data.

By Sean Mitchell • 4 min read • Last week
Proofpoint expands insider-risk tools to Microsoft 365
Data Protection

Proofpoint expands insider-risk tools to Microsoft 365

Investigators will get a fuller audit trail as the software links Microsoft 365 activity and AI prompts with emails, files and logs.

By Sean Mitchell • 4 min read • Last week
Google warns of AI-powered cyberattacks in live ops
Malware

Google warns of AI-powered cyberattacks in live ops

Defenders now have minutes, not hours, as attackers use agentic AI to automate credential theft, scanning and extortion across live operations.

By Sean Mitchell • 5 min read • This month
Zscaler launches Agentic SOC to fight AI-driven attacks
Digital Transformation

Zscaler launches Agentic SOC to fight AI-driven attacks

Security teams under pressure from faster intrusions can now use Zscaler's new platform to spot and contain AI-driven attacks at machine speed.

By Sean Mitchell • 4 min read • This month
Zscaler launches Agentic SOC to fight AI-driven attacks
Network Security

Zscaler launches Agentic SOC to fight AI-driven attacks

Security teams are under pressure from faster AI-driven attacks, prompting Zscaler to add automated remediation and third-party integrations globally.

By Sean Mitchell • 4 min read • This month
F5 integrates AI Guardrails into MuleSoft Agent Fabric
Software-as-a-Service

F5 integrates AI Guardrails into MuleSoft Agent Fabric

Businesses using AI agents can now inspect prompts and responses inline, as F5's guardrails plug into MuleSoft's Agent Fabric.

By Sean Mitchell • 4 min read • This month
Jazz launches data loss prevention app on CrowdStrike
Data Protection

Jazz launches data loss prevention app on CrowdStrike

Falcon customers can now get pre-investigated data protection findings in one console, cutting triage work without adding another endpoint agent.

By Joseph Gabriel Lagonsin • 4 min read • This month
Google Cloud adds VPC security tools for BlackLine
Private Cloud

Google Cloud adds VPC security tools for BlackLine

Security teams can now trace blocked cloud requests faster, as Google Cloud rolls out policy intelligence for VPC Service Controls to cut investigation time.

By Sean Mitchell • 4 min read • This month
CrowdStrike launches Falcon Guardian for AI agents
Endpoint Protection

CrowdStrike launches Falcon Guardian for AI agents

The new tools aim to curb prompt injection, data leakage and rogue AI activity as firms deploy agents with wider system access.

By Sean Mitchell • 4 min read • This month
Broadcom adds AI security tools to VMware Tanzu Platform
Data Protection

Broadcom adds AI security tools to VMware Tanzu Platform

Enterprises running AI agents in private clouds are getting stricter controls as Broadcom seeks to curb data leakage, prompt injection and compliance risk.

By Sean Mitchell • 4 min read • This month

Stories from Other Regions

Data exfiltration stories

Authorised and unchecked: Credentialed access is banking's real cyber risk
Identity and Access Management

Authorised and unchecked: Credentialed access is banking's real cyber risk

Banks are being pressed to curb damage from insiders and stolen logins, as regulators demand controls that limit lateral movement.

By Raghu Nandakumara • 4 min read • Last month