Data breach stories
Despite more patching, organisations are leaving the most dangerous flaws open longer, as attackers exploit vulnerabilities before defenders can act.
Australian firms face faster reporting clocks and penalties of up to AUD $50 million, as regulators step up scrutiny after cyber attacks.
Cross-border data breaches could force New Zealand companies to notify multiple regulators, as Asia Pacific rules tighten and deadlines vary widely.
Most attacks still start with weak credentials, unpatched systems or phishing, so the firm says budgets should shore up basics before AI fears.
Data recovery teams face a tougher test as new ransomware often corrupts files without full encryption, Index Engines said.
Businesses face rising disruption unless seven basic cyber controls are properly integrated, tested and owned across identity, recovery and supplier access.
Publicly boasting about AI security breaches could soon hand regulators and litigants a ready-made paper trail.
Most fake hires are exposed only after getting system access, leaving companies vulnerable for days and often weeks before a fraud is spotted.
Nearly two-thirds say digital mistrust has altered daily life, with many also willing to walk away from firms after data breaches.
Recent breaches show healthcare providers could leave former staff with lingering access to patient records, even after credentials are meant to be revoked.
Australian organisations are paying millions more when breaches linger, making delayed cyber investment a boardroom problem rather than a technical one.
A months-long detection gap has exposed how AI agents and other non-human identities can reach sensitive systems before anyone notices.
A cyber breach can now distort ad spend, customer data and campaign performance if businesses fail to lock down marketing systems.
Historical breaches are resurfacing in AI search when buyers check trust, prompting firms to keep post-incident messaging visible for years.
Verified supplier checks could help governments cut breach risks and avoid service disruptions as agencies rely on thousands of contractors.
The new feature could help insurers spot hidden AI use and concentration risk across cyber portfolios without relying on disclosures from clients.
The campaign exposed how an unknown financially motivated actor used AI tools to breach multiple South Korean financial firms and steal data.
The breach has intensified calls for mandatory licensing and faster incident reporting as unions warn advanced AI could undermine essential public services.
Boards are being urged to beef up defences as AI tools may soon help criminals automate attacks and target New Zealand organisations more precisely.
Singapore regulators are pressing firms to stop using identity numbers for authentication as leaked telecom records can fuel years of impersonation fraud.
