Sensitive Information stories
Police warned over shifting information to Microsoft cloud services
Last week
#
data protection
#
data privacy
#
cybersecurity
Police warned of 'very high' privacy risks in shifting sensitive data to Microsoft's cloud, amid a cautious trial in Wellington started in 2023.
Google Cloud Run vulnerability exposed by Tenable Research
Last month
#
data protection
#
cloud security
#
breach prevention
Tenable Research has uncovered a vulnerability in Google Cloud Run, named ImageRunner, which could allow attackers to access private container images.
Endowus teams with Twilio to enhance platform security
Wed, 12th Mar 2025
#
cybersecurity
#
sms
#
fraud
Endowus has teamed up with Twilio to enhance security on its digital wealth platform, addressing a surge in fraud cases with advanced verification measures.
Appdome launches plugins to combat DeepSeek AI threats
Fri, 28th Feb 2025
#
smartphones
#
malware
#
data protection
Appdome has launched dynamic defence plugins to combat threats from the popular DeepSeek AI app, which poses serious security risks to mobile users.
Data leak at Chinese firm reveals government monitoring
Wed, 26th Feb 2025
#
data protection
#
data analytics
#
edr
A data leak from TopSec, a Chinese cybersecurity firm, reveals its role in aiding the government’s web monitoring efforts, according to SentinelLabs.
Semperis stresses risk for healthcare organisations amidst rising cyber threats
Fri, 21st Feb 2025
#
ransomware
#
breach prevention
#
cybersecurity
Following a ransomware attack on HCRG Care Group, Semperis' Jeff Wichman has highlighted the major risk for healthcare organisations.
Australia bans Chinese AI platform DeepSeek over security
Wed, 12th Feb 2025
#
firewalls
#
data protection
#
breach prevention
The Australian government has banned the Chinese AI platform DeepSeek from its systems, echoing similar actions by the US and Italy over security risks.
Malware targets newcomers with Trojan disguised as tool
Mon, 27th Jan 2025
#
malware
#
edr
#
cybersecurity
CloudSEK has revealed a cyber threat impacting over 18,000 devices worldwide, targeting novice cybersecurity users with a malicious XWorm Remote Access Trojan builder.
Elastic completes IRAP certification for Elastic Cloud
Thu, 23rd Jan 2025
#
data protection
#
cybersecurity
#
cloud services
Elastic has achieved the Protected level IRAP certification for Elastic Cloud, ensuring compliance with Australian government security requirements.
Zendesk exploit allows phishing scams, CloudSEK reports
Wed, 22nd Jan 2025
#
endpoint protection
#
phishing
#
email security
CloudSEK's latest report reveals how cybercriminals exploit Zendesk's subdomain feature to create convincing phishing scams, risking brand trust and security.
Infoblox uncovers cyber threats exploiting domain spoofing
Wed, 15th Jan 2025
#
malware
#
phishing
#
advanced persistent threat protection
Research from Infoblox reveals ongoing exploitation of spoofed domains in malicious spam campaigns, highlighting the persistent threat posed by cybercriminals.
30,000 Postman workspaces leak API keys & credentials
Fri, 27th Dec 2024
#
phishing
#
martech
#
email security
CloudSEK has uncovered over 30,000 exposed Postman workspaces leaking sensitive API keys, affecting major firms across healthcare, finance, and sports sectors.
DeepL report reveals AI's transformative role in law
Tue, 17th Dec 2024
#
legal tech
#
communication
#
data security
A new report by DeepL reveals that 87% of legal professionals find AI tools enhance their work, marking a significant shift in the legal sector.
Upwind launches Shift Left to enhance build-time security
Thu, 12th Dec 2024
#
cx
#
martech
#
application security
Upwind has launched its Shift Left capability, enhancing CI/CD pipelines by integrating runtime context to help developers prioritise vulnerabilities.
Australia's scam prevention law aims for AUD $50m fines
Fri, 8th Nov 2024
#
uc
#
collaboration
#
telco
Australia's new Scam Prevention Framework compels banks and telecoms to tackle rising scams, with fines of up to AUD $50 million for non-compliance.
UK firms double encryption policy use in 2024 study finds
Thu, 17th Oct 2024
#
data protection
#
ransomware
#
encryption
Research by Apricorn reveals that the adoption of encryption policies among UK organisations has doubled in 2024, with 46% now mandating encryption for all data.
Genesis Energy teams with Informatica for AI-driven data governance
Tue, 1st Oct 2024
#
power / energy
#
collaboration
#
informatica
Genesis Energy partners with Informatica to implement AI-powered data governance, aiming to enhance data quality, streamline operations, and support advanced AI solutions.
Cyber attack disrupts 20 UK railway stations, sparks security fears
Mon, 30th Sep 2024
#
advanced persistent threat protection
#
iam
#
cybersecurity
A cyberattack disrupted services at 20 UK railway stations, exposing security flaws in public transport infrastructure and raising public anxiety over data breaches.
Vectra AI reveals critical flaw in Google Cloud Document AI
Fri, 20th Sep 2024
#
storage
#
soc
#
ai security
Vectra AI reveals a critical Transitive Access Abuse vulnerability in Google Cloud's Document AI, raising data exfiltration risk for users.
Cybercriminals exploit content platforms for phishing attacks
Wed, 18th Sep 2024
#
firewalls
#
breach prevention
#
ai
Cybercriminals exploit popular content platforms to launch sophisticated phishing attacks, targeting users in Singapore and the Asia-Pacific region.