Stolen ConnectWise ‘SkyKick’ credential exposed Microsoft 365 tenants
Cloud Backup pulled worldwide as customers hunt for planted credentials valid until 2028.
Australian gov, media networks reached by Israeli firm’s spy ads
Ads tied to mercenary spyware turned up on ANSTO and critical infrastructure networks.
Shopify tells Australian store to stay shut after hijacked extensions divert shoppers
Malicious Javascript in add-ons sent shoppers to fake checkouts.
ASIC’s security and data chiefs to leave in December
Corporate watchdog now wants a CISO, CDAO and “contract CTO”.
In Pictures: Governing the agents of chaos Saviynt Melbourne roundtable
A selection of photos from a recent iTnews roundtable lunch at Woodside – Pan Pacific in Melbourne.
ASD’s Essential Eight replacement moves away from maturity ladder
Organisations will report security area by area.
Microsoft floats “risk cohorts” as patch load hits record size
Tsunami of monthly fixes tops 1400 in October.
US raids 40 laptop farms for North Korean IT workers
But researchers expect disruption of “Famous Chollima” to be short-lived.
Attackers chain three Ivanti VPN zero-days for root access
One of the flaws awaits fix.
Investigators hunt French supermarket fridge hackers
No claim of responsibility.