SecurityBrief New Zealand - Technology news for CISOs & cybersecurity decision-makers

Sensitive Information stories

Modern office building split ai digital patterns and cracked security shields
Growing gap revealed between AI innovation & enterprise security
Last week
#
devops
#
supply chain
#
apm
A new report reveals a widening gap between AI innovation and enterprise security, with 36% of firms struggling to keep up with generative AI risks.
Techday f 1c642efadd75b1b7bfd0
Personal data breach at rights commission triggers new alarm
Thu, 15th May 2025
#
firewalls
#
data protection
#
devops
The Australian Human Rights Commission has suffered a data breach after sensitive documents were exposed online due to a server misconfiguration, raising security concerns.
Techday f a849510fad36db80c195
Privacy Week: Sensitive information stored online can hurt you
Mon, 12th May 2025
#
storage
#
data protection
#
ransomware
Sensitive personal data stored online faces persistent threats from cybercriminals, with recent breaches underscoring the urgent need for better protection measures.
Rnz police warned
Police warned over shifting information to Microsoft cloud services
Tue, 29th Apr 2025
#
data protection
#
data privacy
#
cybersecurity
Police warned of 'very high' privacy risks in shifting sensitive data to Microsoft's cloud, amid a cautious trial in Wellington started in 2023.
Techday f 37de37dbd807dfc23b19
Google Cloud Run vulnerability exposed by Tenable Research
Fri, 4th Apr 2025
#
data protection
#
cloud security
#
breach prevention
Tenable Research has uncovered a vulnerability in Google Cloud Run, named ImageRunner, which could allow attackers to access private container images.
Techday de065623474b0814bd1e
Endowus teams with Twilio to enhance platform security
Wed, 12th Mar 2025
#
cybersecurity
#
sms
#
fraud
Endowus has teamed up with Twilio to enhance security on its digital wealth platform, addressing a surge in fraud cases with advanced verification measures.
Techday 04fb837f2e9a6ca92fdf
Appdome launches plugins to combat DeepSeek AI threats
Fri, 28th Feb 2025
#
smartphones
#
malware
#
data protection
Appdome has launched dynamic defence plugins to combat threats from the popular DeepSeek AI app, which poses serious security risks to mobile users.
Techday f 2f806346fa347e6b0860
Data leak at Chinese firm reveals government monitoring
Wed, 26th Feb 2025
#
data protection
#
data analytics
#
edr
A data leak from TopSec, a Chinese cybersecurity firm, reveals its role in aiding the government’s web monitoring efforts, according to SentinelLabs.
Techday de70f948787180cc89d9
Semperis stresses risk for healthcare organisations amidst rising cyber threats
Fri, 21st Feb 2025
#
ransomware
#
breach prevention
#
cybersecurity
Following a ransomware attack on HCRG Care Group, Semperis' Jeff Wichman has highlighted the major risk for healthcare organisations.
Techday 30107db524b3a738f766
Australia bans Chinese AI platform DeepSeek over security
Wed, 12th Feb 2025
#
firewalls
#
data protection
#
supply chain
The Australian government has banned the Chinese AI platform DeepSeek from its systems, echoing similar actions by the US and Italy over security risks.
Techday 9a7aa3a75129650482ff
Malware targets newcomers with Trojan disguised as tool
Mon, 27th Jan 2025
#
malware
#
edr
#
cybersecurity
CloudSEK has revealed a cyber threat impacting over 18,000 devices worldwide, targeting novice cybersecurity users with a malicious XWorm Remote Access Trojan builder.
Techday 8574190c063b065b5f81
Elastic completes IRAP certification for Elastic Cloud
Thu, 23rd Jan 2025
#
data protection
#
cybersecurity
#
cloud services
Elastic has achieved the Protected level IRAP certification for Elastic Cloud, ensuring compliance with Australian government security requirements.
Techday f 114f17dc95ecbd9d9df6
Zendesk exploit allows phishing scams, CloudSEK reports
Wed, 22nd Jan 2025
#
endpoint protection
#
phishing
#
email security
CloudSEK's latest report reveals how cybercriminals exploit Zendesk's subdomain feature to create convincing phishing scams, risking brand trust and security.
Techday fb9543ff17766b009d2c
Infoblox uncovers cyber threats exploiting domain spoofing
Wed, 15th Jan 2025
#
malware
#
phishing
#
advanced persistent threat protection
Research from Infoblox reveals ongoing exploitation of spoofed domains in malicious spam campaigns, highlighting the persistent threat posed by cybercriminals.
Techday c6128a86cdbdb7854b0f
30,000 Postman workspaces leak API keys & credentials
Fri, 27th Dec 2024
#
phishing
#
martech
#
email security
CloudSEK has uncovered over 30,000 exposed Postman workspaces leaking sensitive API keys, affecting major firms across healthcare, finance, and sports sectors.
Techday bc6c4b1875c13aa578cd
DeepL report reveals AI's transformative role in law
Tue, 17th Dec 2024
#
legaltech
#
communication
#
data security
A new report by DeepL reveals that 87% of legal professionals find AI tools enhance their work, marking a significant shift in the legal sector.
Techday c875827c28c97e73fd28
Upwind launches Shift Left to enhance build-time security
Thu, 12th Dec 2024
#
cx
#
martech
#
application security
Upwind has launched its Shift Left capability, enhancing CI/CD pipelines by integrating runtime context to help developers prioritise vulnerabilities.
Techday c37aeca75e2b8da87cd7
Australia's scam prevention law aims for AUD $50m fines
Fri, 8th Nov 2024
#
uc
#
collaboration
#
data sharing
Australia's new Scam Prevention Framework compels banks and telecoms to tackle rising scams, with fines of up to AUD $50 million for non-compliance.
Techday 5a1ac4e2a25e357edef9
UK firms double encryption policy use in 2024 study finds
Thu, 17th Oct 2024
#
data protection
#
ransomware
#
encryption
Research by Apricorn reveals that the adoption of encryption policies among UK organisations has doubled in 2024, with 46% now mandating encryption for all data.
Techday 9ebe16e9ba692ff93456
Genesis Energy teams with Informatica for AI-driven data governance
Tue, 1st Oct 2024
#
power / energy
#
collaboration
#
informatica
Genesis Energy partners with Informatica to implement AI-powered data governance, aiming to enhance data quality, streamline operations, and support advanced AI solutions.