The Ultimate Guide to Cybersecurity
A curated Kiwi edition of TechDay news, analysis, interviews, reviews, job moves, and related resources for Cybersecurity.
What to know about Cybersecurity
Cybersecurity is a critical and evolving field dedicated to protecting individuals, businesses, and governments from online threats. Amid transformative advancements such as AI, cloud adoption, quantum computing, and fluctuating geopolitical risks, organisations are navigating an increasingly complex cyber threat landscape.
Recent developments across the cybersecurity sphere highlight crucial topics including ransomware surges, deepfake scams, API security lapses, identity management complexities, and the growing importance of Zero Trust frameworks. These trends underscore the need for proactive strategies, comprehensive threat detection, agile responses, and a strengthening of human and technological defenses.
With expanding attack surfaces driven by remote work, Internet of Things (IoT) devices, and digital transformation, there is a paramount focus on integrating AI-powered solutions, enhancing data protection, and addressing skills shortages. Initiatives promoting diversity, education, and collaborative partnerships continue to be essential in fortifying cyber resilience.
Exploring these themes through the latest stories and expert insights encourages readers to deepen their understanding of contemporary cybersecurity challenges and solutions, emphasizing actionable knowledge to help safeguard digital futures in an interconnected world.
Kiwi Cybersecurity News
Regional stories with direct local relevance
Trade Me dominates NZ cyber awards with triple win
Trade Me's security work has been recognised for helping keep its platform safer, as judges honoured its team, leader and AI project.
Half of New Zealand PHP servers run unsupported versions
Supported releases are now the minority on exposed New Zealand servers, after a scan found 560 of 991 disclosed PHP versions were out of security support.
Deel launches security tool to spot fake remote hires
Employers can now flag fake applicants earlier as concern grows over deepfakes, stolen identities and forged documents in remote hiring.
Division Zero launches continuous cyber testing platform
New Zealand firms are under pressure to spot vulnerabilities sooner as cyber attacks accelerate and annual audits leave long gaps unchecked.
WitFoo offers UC student first Christchurch role
Christchurch's tech ecosystem gets a boost as WitFoo turns a sponsored UC project into a job offer and expands its local footprint.
AI boosts value of experienced developers, says Lancom CTO
AI has made prototypes cheap, but production failures remain costly, putting a premium on experienced developers who can spot hidden risks.
Analyst Insights
Research and market analysis connected to Cybersecurity
Tanium joins OpenAI cyber programme for threat research
Deel launches security tool to spot fake remote hires
Gartner flags 10 tech trends for 2027 as AI governance
Gigamon unveils tools to track shadow AI across networks
AI isn't the next cloud. Don't let it outgrow IT
Featured News
AI success takes more than a promising pilot project
Without stronger governance and clear accountability, most AI pilots will struggle to reach production or deliver real business value.
Palo Alto Networks: AI hunting vulnerability in legacy systems
Critical infrastructure operators are being urged to merge IT and OT security as AI speeds up attacks on ageing industrial systems.
Sectigo targets ANZ growth as certificate lifespans shrink
Shorter certificate lifespans are pushing Australian and New Zealand firms to automate renewals, or face higher security and outage risks.
Netskope launches Catalyst program: Facilitate, secure and get out of the way
Netskope's revamped Catalyst MSP/SP Program and Partner Orchestrator aim to have MSP customers flexibly provisioned within 15 minutes.
Transform your business with Telstra Adaptive Networks
Businesses facing outages and surging demand can now reroute traffic, scale bandwidth and cut IT admin as Telstra's network adapts in real time.
AI attacks demand operational change in the post Mythos era
Only 5% of Australian companies are ready for AI-driven attacks, leaving most exposed as threat actors move at machine speed.
UST: Businesses must rethink how AI returns are measured
Australian firms risk spending increasing resources on AI pilots that ultimately fail to prove gains in revenue, efficiency or customer service.
Data sovereignty is a strategic imperative in the AI era
AI is pushing boards to weigh local control against cloud convenience, with 80% of respondents saying sovereignty matters more in vendor selection.
Organisations need a strategic approach to skills in the AI world
Companies are missing out on returns from AI and other new tools because staff training and change management are lagging behind.
Interview: Cloudera says AI agents reshape zero trust
Enterprises must update identity controls as software agents generate more requests and need tightly time-limited access to sensitive systems.
VAST Data targets AI data sovereignty with DataEnclave
Enterprises and governments could run AI on sensitive data without exposing it, as the technology targets sovereignty rules across APAC.
AI demands network agility and better operational governance
Governance gaps are leaving most organisations exposed as AI traffic surges and networks struggle to keep pace with machine-speed demands.
Zscaler takes zero trust beyond the corporate network
Critical infrastructure operators are using cellular links to secure distributed assets as outages and spoofing raise the stakes for resilience.
Workiva: The secret compliance and reporting arms race
Driven by improved tooling, finance teams are meeting higher standards as regulators and analysts scrutinise disclosures faster.
Filigran: Does your CISO know enough?
CISOs are under pressure to answer boardroom questions on exposure in minutes, as Filigran pushes CTEM and open-source validation tools.
Genetec: Open platforms key as physical security evolves
Businesses are prioritising hybrid, open security systems to protect existing hardware investments while adopting cloud and AI tools more gradually.
AI transforming physical security into enterprise data solution
AI and cloud tools are turning cameras into live operational data sources, helping firms cut costs, spot errors and manage fleets centrally.
QBE: Mooted critical infrastructure penalties hint at cyber regulatory future
Proposed fines of up to $5 million pushes more New Zealand firms to consider cyber cover as regulatory certainty emerges.
Governance controls are crucial for AI adoption and modernisation
Trusted partners and tighter guardrails are becoming essential as AI agents expand the attack surface and put data sovereignty on the line.
Exclusive: Cloudera builds Hadoop-free future platform
Existing customers get six years of support as Cloudera shifts new AI and analytics workloads to a Hadoop-free platform due in November.
Datadog targets enterprise risk with AI and automation
Australian enterprises are under pressure to tame AI-driven complexity, compliance risk and rising technology costs as Datadog broadens its platform.
Mimecast CEO: Agentic AI threat novel but not entirely new
Hidden AI risks are already widespread in workplaces, with Mimecast saying users are driving shadow tools and most exposure still starts with people.
The internet times are a'changing Fastly
Bot traffic is forcing Fastly to adapt its edge cloud tools as publishers and AI firms battle over caching, access and data protection.
Trusted identity cuts across physical and logical systems
Unified identity systems can cut admin overhead and shrink attack surfaces as remote work and cyber threats blur physical and digital access.
Rimini Street offers AI magic without the forced ERP migration
CIOs can keep existing ERP systems and still adopt agentic AI, as Rimini Street pitches a cheaper path away from vendor-led migrations.
Jamf launches AI Governance to enhance visibility, security
IT teams can now track AI models on Apple fleets to curb data leaks and token spend as businesses wrestle with shadow AI.
.webp)
AI models expose new attack surfaces through misconfiguration
Misconfigured models are giving attackers a fresh route into cloud systems, raising the risk of data theft and service compromise.
Thermomix moves HQ to Melbourne to capture Aussie kitchens
The shift will bring the appliance maker closer to eastern customers, as Australia and New Zealand now account for most of its sales.
Schrodinger's ERP both dead and alive, says Rimini Street
Businesses can avoid costly ERP rip-and-replace projects by layering AI and automation onto existing systems, Rimini Street says.
AI adoption races ahead of governance in businesses
Only one in six staff are getting enough AI training, leaving firms exposed to poor decisions, shadow tools and weak returns.
Network segmentation - you can't attack what you can't see
Fast-moving exploits are shrinking patch windows to hours, making network segmentation vital for protecting cameras, medical devices and other connected assets.
SAS Innovate: New era of scams requires novel solutions
Australians are losing billions as AI-driven fraud pushes banks, telcos and platforms to share scam data faster and stop payments earlier.
Reviews
Hands-on review: Avast Ultimate Business Security verdict
Hands-on review: Kensington VeriMark NFC+USB-C security key
Hands-on review: Norton VPN (Standard)
Hands-on review: Avast Deepfake Guard and Scam Guardian
Hands-on Review: Norton 360 Advanced security suite
Expert Columns
Security Learnings from the Open Source Front Line
Cyber security now starts at the job interview
Who Really Pays When a Supplier Payment Is Hijacked? Leveraging Your Procurement Software to Combat Fraud
Cybersecurity Awareness: The Importance of Getting the Basics Right
The crown jewels of cybersecurity: What can your business not afford to lose
Shadow AI Is Creating an Unmanaged Identity Crisis Across APAC
It's time to embrace our robot overlords
Singapore's 2035 Quantum-Safe Target Starts With Identity
AI moves fast: are you training your people to use it wisely?
Small but mighty - micro data centres are the foundation of security and disaster recovery
Interviews
Interviews and video coverage from the network
AI success takes more than a promising pilot project
Palo Alto Networks: AI hunting vulnerability in legacy systems
Sectigo targets ANZ growth as certificate lifespans shrink
Netskope launches Catalyst program: Facilitate, secure and get out of the way
Transform your business with Telstra Adaptive Networks
Recent Cybersecurity News
1Password launches sign-in tool for personal AI agents
The move could let users approve AI logins without exposing passwords, as 1Password bets secure access will shape adoption of personal agents.
GuidePoint urges PHP hunting after new vulnerabilities
Defenders are being told to hunt for suspicious PHP activity as GuidePoint warns the new flaws could already be probed, even without confirmed indicators.
Ransomware attacks jump 23% as industrial firms hit
Industrial firms bore the brunt as ransomware incidents climbed 23% in the third quarter, with North America also hit hard.
AI investment outpaces revenue for TD SYNNEX resellers
Fewer than a quarter of resellers say AI drives meaningful revenue, as security and governance worries slow pilots from reaching production.
AI attacker blocked by microsegmentation in Anthropic test
The result underscores how microsegmentation can stop an AI intruder from turning one compromised machine into wider network access.
Tracebit says context bombs cut AI attack success 91%
Tracebit's research suggests deception can sharply slow AI-driven intrusions, lifting attacker costs 23-fold while cutting completed objectives by 91%.
Illumio warns AI authority is outpacing security controls
Most firms now hand AI decisions once reserved for staff, but fewer than half can fully audit its actions, a new survey found.
Logicalis wins Cisco secure networking specialisation
It gives multinational customers a single secure networking managed-service model across five markets, with plans to double that reach within six months.
Rapid7 warns of three-day gap before attacks exploit flaws
Defenders now have just days to patch internet-facing systems, as 71% of tracked exploitation happened within a week of disclosure.
Fleet adds NVIDIA AI workstations to device management
IT teams can now monitor AI workstations and deskside supercomputers alongside laptops and servers, tightening oversight as firms adopt NVIDIA hardware.
ASC X9 Financial PKI gains traction ahead of DTCC deadlines
More than 1,900 organisations are now deploying or testing the system as DTCC certificate rules force financial firms to move fast before year-end deadlines.
CrowdStrike launches tools to detect risky AI agents
The tools are designed to spot rogue AI behaviour and simulate attacks before autonomous systems can reach critical data or systems.
JFrog adds AI security controls for developer tools
Security teams can now spot unauthorised AI tools on developer machines before they reach production, as JFrog extends its controls.
Hackers abuse trusted AI tools to breach organisations
Attackers are abusing approved AI and admin tools to move through networks in minutes, making traditional trust-based defences far less reliable.
Black Kite adds quantum readiness to supplier cyber ratings
Companies can now see which suppliers are already moving towards quantum-safe encryption, as Black Kite folds the new checks into its cyber ratings.
BeyondTrust launches AI agent security with new research
The new controls aim to curb AI agents' machine-speed access to company systems as research shows they can trigger thousands of endpoint actions.
AppViewX expands Quantum Trust Hub for quantum migration
Security teams gain a standalone tool to map quantum-era cryptographic exposure across certificates, keys and software before 2030 deadlines bite.
Lab 1 warns breach data now exposes thousands more firms
The findings show stolen files can reach far beyond the named victim, with the median breach now exposing data linked to 542 other organisations.
Horváth & SANNOS AI partner on finance control review
Finance teams could spend less time on document checks as the partnership aims to automate evidence review while keeping expert judgement in place.
Toshiba launches platform for quantum-safe networks
Organisations facing future encryption risks can now trial Toshiba's system, which is designed to scale quantum-safe protection across existing networks.
Job Moves
Ingram Micro names Becs Paterson to New Zealand role
Securecom appoints Head of Cyber Security & promotes Kolver
Equinox IT appoints Victoria MacLennan as director
Inde appoints Nish Sudhakaran as AI & data director
Microsoft appoints Nick Walton as NZ Managing Director
One New Zealand names CFO, CTO in executive succession
HP New Zealand appoints Daniel Roberts as Head of Enterprise
Spectrum Consulting names Darryl van Rensburg for AI drive
Gallagher Security names Josh Arnold Chief Product Lead
