SafetyNews New Zealand - Aotearoa's industrial safety news for decision-makers
New Zealand

Threat actors Stories

Global Stories

Threat actors stories

Microsoft Patch Tuesday hits 999 flaws with two exploited
Ransomware

Microsoft Patch Tuesday hits 999 flaws with two exploited

Patch management teams face a record burden as Microsoft's latest monthly release spans 999 flaws, including two under active attack.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Searchlight Cyber adds RST threat data to Investigate
Security Operations Centres

Searchlight Cyber adds RST threat data to Investigate

Analysts will save hours of manual research as structured intelligence on threat actors, malware and CVEs is added to Searchlight Threat.

By Joseph Gabriel Lagonsin • 4 min read • This month
Education hit hardest by cyber attacks, SonicWall says
Malware

Education hit hardest by cyber attacks, SonicWall says

Student records and research systems are coming under intense pressure as education networks log the highest per-device cyber attack rates, SonicWall said.

By Sean Mitchell • 4 min read • This month
Cambodia lures deploy SparkRAT in stealthy malware campaign
Endpoint Protection

Cambodia lures deploy SparkRAT in stealthy malware campaign

Victims risked silent compromise as attackers hid SparkRAT inside Cambodian-themed files and disabled security tools with a vulnerable driver.

By Joseph Gabriel Lagonsin • 4 min read • This month
Tech leaders urge faster progress for women in cyber
Artificial Intelligence

Tech leaders urge faster progress for women in cyber

AI-driven cyber threats are sharpening the talent crunch, as women still account for just 22% of the global workforce.

By Sofiah Nichole Salivio • 5 min read • This month
TrendAI tops CyberGym with 97% exploit-remediation rate
Cloud Security

TrendAI tops CyberGym with 97% exploit-remediation rate

Enterprises could cut their exposure window as TrendAI's AESIR scored 97% on an independent benchmark against confirmed software flaws.

By Mark Tarre • 4 min read • Last month
TA4922 uses PackClient malware in tax phishing attacks
Phishing

TA4922 uses PackClient malware in tax phishing attacks

Proofpoint said the modular trojan can steal data and monitor users, raising risks for finance teams targeted by fake tax notices.

By Sean Mitchell • 4 min read • Last month
Ransomware attacks hit 894 as AI boosts cyber crime
Malware

Ransomware attacks hit 894 as AI boosts cyber crime

North America and Europe bore most of the 894 July ransomware incidents as NCC Group warned AI tools are accelerating attacks.

By Joseph Gabriel Lagonsin • 3 min read • Last month
Microsoft patches two critical Active Directory flaws
Ransomware

Microsoft patches two critical Active Directory flaws

The flaws could have let attackers hijack identities and take over domains in environments where Active Directory still runs most enterprise access.

By Mark Tarre • 4 min read • Last month
NCC Group named in Forrester cyber response report
Disaster Recovery

NCC Group named in Forrester cyber response report

Clients now want help across the full cyber attack lifecycle, as Forrester says incident response is moving beyond containment and forensics.

By Sean Mitchell • 3 min read • Last month
Google flags Russian spies abusing real login features
Malware

Google flags Russian spies abusing real login features

Personal accounts used by researchers and officials are being hit by Russian-linked groups, exposing institutions to stealthy account theft and malware.

By Joseph Gabriel Lagonsin • 5 min read • Last month
ReliaQuest deepens Anthropic deal to bolster GreyMatter
Data Protection

ReliaQuest deepens Anthropic deal to bolster GreyMatter

GreyMatter users will gain wider access to Anthropic's Claude models as ReliaQuest brings them deeper into its threat response platform.

By Mark Tarre • 4 min read • Last month
Cyber criminals spend USD $7 million on expired domains
Cybersecurity

Cyber criminals spend USD $7 million on expired domains

Expired web addresses are becoming a lucrative shortcut to trust and traffic, with one group spending more than USD $7 million.

By Mark Tarre • 4 min read • Last month
Network segmentation - you can't attack what you can't see
Firewalls

Network segmentation - you can't attack what you can't see

Fast-moving exploits are shrinking patch windows to hours, making network segmentation vital for protecting cameras, medical devices and other connected assets.

By Anthony Caruana • 5 min read • Last month
Australia & New Zealand face surge in critical flaws
Network Infrastructure

Australia & New Zealand face surge in critical flaws

Patch backlogs are leaving organisations exposed, with 85 high-impact flaws flagged across Australia and New Zealand, up 44% in July.

By Joseph Gabriel Lagonsin • 4 min read • Last month

Stories from Other Regions

Threat actors stories

Authorised and unchecked: Credentialed access is banking's real cyber risk
Identity and Access Management

Authorised and unchecked: Credentialed access is banking's real cyber risk

Banks are being pressed to curb damage from insiders and stolen logins, as regulators demand controls that limit lateral movement.

By Raghu Nandakumara • 4 min read • Last month
Iran-linked cyber attack on UK power plant was inevitable
Malware

Iran-linked cyber attack on UK power plant was inevitable

A four-day shutdown at a UK energy site has intensified warnings that ageing infrastructure leaves critical national systems exposed to wider disruption.

By Sofiah Nichole Salivio • 5 min read • Last month
Concentric AI adds vision model to spot sensitive files
Data Protection

Concentric AI adds vision model to spot sensitive files

Security teams can now spot blurred passports and licences at scale, as the new feature classifies sensitive files by visual cues alone.

By Mark Tarre • 3 min read • Last month