SecurityBrief Australia

PhishByte has warned Australian businesses that the ACSC Essential Eight's technical controls do not address human risk, leaving phishing and social engineering as gaps in many cybersecurity programmes. The warning comes as the Essential Eight becomes a stronger expectation for small and medium-sized businesses in Australia.

Forrester has published a forecast showing that global technology sovereignty will improve only marginally across 14 major economies by 2030, with China and the US well ahead of other countries. The average technology sovereignty score across the countries assessed is expected to edge up from 39% to 40% over the period, suggesting that heavy spending on domestic AI, semiconductors, cloud systems and related infrastructure will not produce rapid gains for most nations.

For many organisations, post-quantum cryptography (PQC) still feels like a distant problem. Even something to worry about in the next decade, not the next budget cycle. That mindset should sound familiar. In the late 1990s, the looming Y2K bug was (at least at first) widely dismissed as overblown. Systems continued to run, deadlines slipped, and many assumed the issue would resolve itself. It didn't.

Australia's financial institutions are paying more than AUD $4,000 a day for some specialist regulatory and transformation contractors, according to Outsized. Shortages are most acute in banking, insurance and superannuation. The data points to a sharp divide in the financial services labour market. Large institutions cut about 8,000 permanent roles across 2025 while struggling to recruit specialists for regulatory programmes and large change projects.

ClickHouse will bring together technology companies including Nine, Xero, Canva, Buildkite, Neara and Langfuse at its Open House conferences in Sydney and Melbourne, where engineering teams will discuss how they use the company's real-time data platform in production. The events will feature presentations from customer organisations alongside ClickHouse engineers. Sessions will focus on real-time analytics, observability, AI systems and data infrastructure.

Fortinet has published research showing that Australian organisations are struggling to keep pace with cybersecurity complexity and AI-driven threats. The findings point to a shift towards unified security platforms. The study, conducted by Forrester Consulting, found that 63 per cent of organisations in Australia cited AI-driven threats as a leading concern. Another 60 per cent pointed to fragmented tools and architectures, as well as the burden of high alert volumes.

City of Moreton Bay has launched a cost-sharing scheme with housing developers to install CCTV in new residential estates, with the first three partnerships delivering 15 cameras in the Waraba growth area. The model is intended to speed up the rollout of public safety cameras in fast-growing neighbourhoods while reducing the upfront cost to ratepayers. It targets areas where unoccupied homes and construction sites can heighten the risk of crime and anti-social behaviour.

Agent Island has released version 1.7.1 of its desktop companion for Claude Code and Codex, adding changes to local session monitoring on macOS and Windows. The software shows developers the state of local AI coding sessions without sending session data to a hosted monitoring service. It reads supported local Claude Code and Codex session data and presents status information in a desktop interface.

Recast has introduced a bundled endpoint management and patching offering that combines three existing products into one package for IT teams using Microsoft Intune, Configuration Manager and hybrid environments. The bundle brings together Right Click Tools, Right Click Tools Patching and Warranty Insights. It is designed to help customers cope with faster vulnerability discovery, growing patch workloads and the need for better oversight of endpoint estates.

Hugging Face has disclosed an intrusion into part of its production infrastructure, saying the incident was carried out by an autonomous AI agent system. It found unauthorised access to a limited set of internal datasets and several credentials used by its services. The company is still assessing whether any partner or customer data was affected and said any affected parties would be contacted directly.