* Australia and US Impose Sanctions on North Korean Cyber Operations

* Researchers Uncover Vulnerabilities in ChatGPT that Enable Data Leaks and Malicious Behaviour

* Threat Actors Ramp Up Malicious Use of AI Tools, Posing Escalating Risks

* Researchers Uncover Vulnerabilities in FIA’s Driver Categorisation System, Exposing F1 Drivers’ Sensitive Data

* Louvre Heist Exposes Shocking Security Vulnerabilities, as Password to Video Surveillance System Was Simply “Louvre”

* Microsoft 365 Copilot Vulnerability Allows Data Exfiltration

* Malicious “Claude” Code Package Discovered on Popular Open-Source Platforms

* Vulnerabilities Discovered in OpenAI’s Atlas Agentic Browser

* Tasmanian Government Agencies Hit by Cyber Attack

* AFP Building AI to Decipher ‘Crimefluencers’ Online Slang and Emojis

* Cyber Breach at Western Sydney University Exposes Sensitive Student Data

* Meta Introduces New Anti-Scam Tools for WhatsApp and Messenger Users

* Ransomware Attack on Muji Supplier Disrupts Online Sales in Japan

* Alarming Study Reveals Only 250 Documents Need to Poison LLMs of Any Size

* Prosper Marketplace Suffers Major Data Breach, Exposing Sensitive Customer Information

Special thanks to Yong Hwee Wee for contribution to this week’s articles.

* Qantas Customer Data Breach: What Affected Customers Need to Know

* Court Injunctions: The Ineffective “Thoughts and Prayers” of Data Breach Response

* Australia’s Annual Cyber Threat Report 2024-2025: Evolving Challenges and Increased Risks

* Mozilla Experimenting Built-In Firefox VPN for Enhanced User Privacy

* MANGO Discloses Customer Data Breach Linked to Marketing Vendor Compromise

* Cyber Threats Evolving Rapidly, Putting Australian Companies at Risk

* LinkedIn Scam Leaves Job Seeker Defrauded of $4,300

* The Dark Side of Data: How Cybercrime is Thriving in the Digital Age

* Docker Empowers Small Businesses with Hardened Images Catalog

* Qantas Targeted by Infamous Hacker Group in Extortion Attempt

Special Thanks to Justin Butterfield for contributing to this week’s Cyber Bites

* Cyber Security Awareness Month: Building a Cyber-Safe Culture in Australia

* Google Drive Enhances Security with AI-Powered Ransomware Detection

* Industrial Cellular Routers in Australia Abused for Smishing Attacks

* Asahi Group Reels from Crippling Cyberattack

* Malicious MCP Server Exposes Enterprises to Widespread Email Theft

* Cyberattack Disrupts Operations at European Airports

* Cybercriminals Target Python Developers in Widespread PyPI Phishing Attacks

* Gartner Survey Reveals Surge in Generative AI-Powered Cyberattacks

* Open Source Infrastructure Doesn’t Run on Thoughts and Prayers: The Urgent Need to Fund Open Source Infrastructure

* Safeguarding the npm Supply Chain: GitHub’s Plan for Stronger Security

* NSW Government Third-Party Cyber Incidents Quadruple as State Strengthens Digital Defenses

* Self-Propagating 'Shai-Hulud' Malware Infects Over 180 NPM Packages in Sophisticated Supply Chain Attack

* Australia Releases Guidance on Banning Social Media for Kids

* Jaguar Land Rover Extends Shutdown for Another Week After Devastating Cyberattack

* Apple 0-Day Vulnerabilities Exploited in Targeted Spy Attacks

* Massive NPM Supply Chain Attack Compromises 18 Popular Packages with 2 Billion Weekly Downloads

* Massive Chinese 'Salt Typhoon' Cyberattack May Have Compromised Data from Nearly Every American

* GhostAction Supply Chain Attack Compromises 817 GitHub Repositories, Steals 3,325 Developer Secrets

* Apple iCloud Calendar Abused for Phishing Scams

* Cloudflare 1.1.1.1 DNS Certificates Misused, Raising Security Concerns

* International Coalition Including Australia Issues Shared Vision for Software Bill of Materials to Strengthen Cybersecurity

* Zscaler Data Breach Exposes Customer Information Following Salesloft Drift Supply Chain Attack

* Cybercriminals Weaponise AI-Powered HexStrike Tool to Rapidly Exploit Newly Disclosed Vulnerabilities

* Melbourne Developer Exposes Critical Gift Card Security Flaw Allowing PIN Brute-Force Attacks

* Google Releases Massive Android Security Update Addressing 84 Vulnerabilities Including Two Actively Exploited Flaws