TelcoNews New Zealand - Telecommunications news for ICT decision-makers
New Zealand

Threat intelligence Stories - Page 6

Global Stories

Threat intelligence stories

Small alert, big defense: Inside a SOC's early-morning response
Virtual Private Networks

Small alert, big defense: Inside a SOC's early-morning response

A Monday-morning Microsoft 365 login from Germany was flagged, letting a partner reset a compromised account before attackers could act.

By Sarah Wilkinson • 4 min read • Last month
Lumen warns of malware-backed proxy networks in APAC
Firewalls

Lumen warns of malware-backed proxy networks in APAC

Proxy networks built from compromised home devices are helping attackers hide in plain sight across Asia Pacific, Lumen says.

By Shannon Williams • 4 min read • Last month
iProov report warns of soaring iOS injection attacks
Unified Communications

iProov report warns of soaring iOS injection attacks

A 1,151% jump in iOS injection attacks in late 2025 has put mobile identity checks under fresh pressure, iProov says.

By Shannon Williams • 4 min read • Last month
Microsoft 365 EvilToken campaign hits hundreds daily
Multi-factor authentication

Microsoft 365 EvilToken campaign hits hundreds daily

Hundreds of Microsoft 365 users are being compromised daily as attackers bypass passwords with device code phishing and OAuth tokens.

By Shannon Williams • 4 min read • Last month
Qualys warns attackers exploit flaws before disclosure
Firewalls

Qualys warns attackers exploit flaws before disclosure

Security teams are falling behind as attackers now exploit some flaws before disclosure, leaving critical systems exposed for longer.

By Joseph Gabriel Lagonsin • 3 min read • Last month
TrendAI: Evolving the cybersecurity value proposition
Hybrid Cloud

TrendAI: Evolving the cybersecurity value proposition

New research shows two-thirds of Australian business and IT leaders feel pressured to approve AI projects while overlooking security risks.

By Donovan Jackson • 4 min read • Last month
Microsoft warns of Storm-1175's rapid Medusa attacks
Ransomware

Microsoft warns of Storm-1175's rapid Medusa attacks

Victims in healthcare, education and finance have faced Medusa ransomware within 24 hours of flaws emerging, Microsoft says.

By Joseph Gabriel Lagonsin • 3 min read • Last month
Qualys warns exploitation is outpacing manual patching
Firewalls

Qualys warns exploitation is outpacing manual patching

Attackers are now exploiting flaws before patches exist, leaving 85% of vulnerable assets unpatched at disclosure across 10,000 organisations.

By Sean Mitchell • 4 min read • Last month
Permiso launches sandbox for AI agent skill security
Firewalls

Permiso launches sandbox for AI agent skill security

Malicious downloads can now be caught at runtime, as the new tool records hidden network calls and file writes before deployment.

By Sofiah Nichole Salivio • 4 min read • Last month
China-aligned TA416 resumes spying on EU & Mideast
Phishing

China-aligned TA416 resumes spying on EU & Mideast

Diplomatic missions in Europe and the Middle East face renewed PlugX-backed espionage as TA416 shifts tactics and targets amid regional tensions.

By Sean Mitchell • 4 min read • Last month
Attackers turn trusted tools into cyber weapon
Malware

Attackers turn trusted tools into cyber weapon

Trusted software and identity sessions are now prime attack paths, with ClickFix linked to more than 44% of defence evasion incidents.

By Shannon Williams • 4 min read • Last month
Cloud security turns to identity, access & sovereignty
Data Protection

Cloud security turns to identity, access & sovereignty

Breaches in large cloud environments are increasingly tied to weak identity controls, misconfigurations and poor data sovereignty governance.

By Mark Tarre • 6 min read • Last month
Cloud security experts warn of control plane risks
Firewalls

Cloud security experts warn of control plane risks

Rising automation and data growth are exposing cloud users to identity drift, hidden telemetry gaps and fragmented defences.

By Mark Tarre • 4 min read • Last month
Zscaler flags Xloader malware's tougher obfuscation
Malware

Zscaler flags Xloader malware's tougher obfuscation

ThreatLabz says the latest Xloader strain uses layered encryption and decoy servers to frustrate analysts while stealing browser credentials.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Google links axios attack to suspected North Korean actor
DevOps

Google links axios attack to suspected North Korean actor

Broad exposure across thousands of applications is feared after Google tied the axios npm supply chain attack to suspected North Korean hackers.

By Mark Tarre • 3 min read • Last month

Stories from Other Regions

Threat intelligence stories

Attackers shift upstream into Australia's network edge
Firewalls

Attackers shift upstream into Australia's network edge

Critical infrastructure and cloud operators face harder-to-detect attacks as criminals turn routers, VPN gateways and IoT kit into proxies.

By Shannon Williams • 4 min read • Last month
Regulated data dominates AI breaches in finance sector
Malware

Regulated data dominates AI breaches in finance sector

Managed AI tools are gaining ground in finance, yet regulated data still drives most policy breaches as staff mix personal and corporate accounts.

By Shannon Williams • 4 min read • Last month
Vulnetix named Australia's first global CVE authority
Malware

Vulnetix named Australia's first global CVE authority

Australian developers can now access free vulnerability tools as Vulnetix takes a formal role in global software flaw tracking.

By Mark Tarre • 3 min read • Last month