APT28-linked campaign hijacks hotel Wi-Fi for logins
ReliaQuest has identified a campaign targeting public Wi-Fi gateways at hotels and conference centres to steal Microsoft 365…
Microsoft makes passkeys default for Entra ID logins
Microsoft will make passkeys the default authentication method in Entra ID, starting with users enabled for SMS or…
Australia critical infrastructure rules tighten risk
Australia’s critical infrastructure operators face new risk management obligations under the Enhanced Critical Infrastructure Risk Management Program Rules,…
Australian football fans share passwords, survey finds
ExpressVPN has published survey findings showing that 17% of Australian football fans have shared passwords so someone else…
Microsoft 365 EvilToken campaign hits hundreds daily
AppOmni’s threat hunting team has identified both attempted and successful EvilToken device code phishing activity across Microsoft 365…
Infostealers increasingly target enterprise SSO access
Flare said infostealer malware is exposing enterprise identity credentials at a rising rate, with late-2025 data showing 16%…
Why Australia must aim higher on the Essential Eight
When the Australian Cyber Security Centre (ACSC) expanded its Essential Eight maturity model in 2021, it marked a…
Attackers exploit ScreenConnect & Microsoft 365 for breaches
Barracuda security researchers have identified an increase in the use of trusted tools such as ScreenConnect for unauthorised…
Whisper 2FA phishing kit targets Microsoft 365 users in Australia
Barracuda threat analysts have released new research into a sophisticated phishing-as-a-service kit, known as Whisper 2FA, that is…
Barracuda warns of surge in advanced OAuth phishing
Barracuda threat analysts have raised concerns over a new wave of email-based threats targeting organisations worldwide, with phishing…
Phishing campaign uses fake Microsoft apps to bypass MFA
Proofpoint has identified a complex phishing campaign using counterfeit Microsoft OAuth applications to evade Multi-Factor Authentication (MFA) and…