Tech Talks With Kinsoft

Got something to say to this podcast? Send a voicemail, and you might hear yourself on the next episode!

Last week in tech, 7 to 14 November 2026.

Microsoft's November Patch Tuesday (10 November) fixes well over a thousand vulnerabilities, with totals differing between sources. The headline is CVE-2026-124194, an Outlook spoofing flaw Microsoft confirms is exploited in the wild: opening a crafted message can leak the user's NTLMv2 hash. CVSS 3.1 score 6.5; added to the CISA KEV catalogue on 10 November. Patch Microsoft 365 Apps and Office LTSC now.

Google patched Chrome zero-day CVE-2026-125350, a use-after-free in XML handling, on 9 November (US). Google says an exploit exists in the wild; it is Chrome's eighth exploited zero-day of 2026. Update Chrome to 157.0.8103.50 or later, and update Edge and other Chromium browsers.

Malbear Labs reports "Operation Snowball", in which a jailbroken AI agent attacked an unnamed European telco through Cisco BroadWorks flaw CVE-2026-20320 (patched August; added to CISA KEV 10 November). The AI-agent account is single-source and not independently confirmed.

Jensen Huang resigned as Nvidia CEO and left the board on 12 November (US); CFO Colette Kress is interim CEO. Nvidia has not given an official reason.

Anthropic set terms on 10 November for a Nasdaq IPO (ticker ANT): 825 million shares at US$70 to US$78, about US$61 billion. Disclosure: this show uses Claude in production.

The Australian Government announced on 10 November it will legislate mandatory safety standards for frontier AI firms, with a new regulator; legislation reportedly expected in 2027.

Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: Microsoft MSRC; CISA KEV; Qualys; Forbes; SecurityOnline; Google Chrome Releases; The Hacker News; BleepingComputer; Infosecurity Magazine; DIGIT; Al Jazeera; TechCrunch; CNBC; Renaissance Capital; Cyber Daily.

Got something to say to this podcast? Send a voicemail, and you might hear yourself on the next episode!

Chainalysis disclosed on 30 October 2026 that an external actor using "offensive agentic techniques" accessed systems and internal tools; the company initially described the data as non-sensitive and said no passwords or tokens were accessed. On 2 November it took Reactor and Data Solutions offline.

On 4 November (Eastern time) it reported an "on-path attack" exposing a subset of customer passwords, then at 11pm that password hashes and live tokens for all users were exposed, plus names and usernames. It reported no evidence that investigations data was accessed. From 6 November KYT and address screening were restored in phases; users must reset passwords and rotate API keys.

Not disclosed: number affected, initial access method, dwell time, attacker. Lessons: scope before reassuring, treat role-labelled staff lists as phishing fuel, rotate tokens and keys, and plan for vendor outages.

Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: Chainalysis security incident notice (updated 6 Nov 2026); BleepingComputer; TechRadar; Cointelegraph; The Block.

Got something to say to this podcast? Send a voicemail, and you might hear yourself on the next episode!

NSW Health reported unauthorised access to its Oral Health Fee For Service Scheme website on 29 October 2026; Cyber Security NSW declared a major incident, announced 4 November. Police estimate about 4GB was taken, including significant personal identification information about third-party providers (dentists). NSW Health says no patient data has been impacted "at this time".

Investigation: Strike Force Civic (NSW Police Cybercrime Squad), with the AFP assisting and contact with the FBI and US DHS; police say suspects appear to be offshore. Cause: not disclosed. Affected numbers: not published. A claimant using the alias ByteToBreach has posted an unverified claim of about 70GB and 100,000 documents, reported by Cyber Daily; police say they have received no demands.

Lessons: supplier data matters, "isolated" is only reassuring if you know what is on the system, and have a disclosure plan ready.

Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: ABC News (4 Nov 2026); Cyber Daily; Medical Republic; Tech Insider AU.

Got something to say to this podcast? Send a voicemail, and you might hear yourself on the next episode!

Last week in tech, 30 Oct to 6 Nov 2026. US tech stocks sold off hard on Thursday 5 November: the Nasdaq Composite fell 5.52%, the S&P 500 4.36% and the Dow 3.44% at the close, with the semiconductor index down about 12%. Reported causes include doubts over AI spending returns, profit-taking and midterm-related worries about data-centre limits; these are reported explanations, not confirmed causes.

The US added 165,000 jobs in October, with unemployment at 4.1% (BLS). OpenAI says GPT-6 Astra was its first model rated Critical for cyber capability; GPT-6 Cyber is reportedly also Critical (single trade-press source). Meta bought AI coding startup Conductor; its cloud service shuts 20 November.

Security: Siemens SIMATIC IoT2050 Node-RED flaw CVE-2026-58115, CVSS 10.0 (v3.1 and v4.0), exploitation reported by VulnCheck from 30 October. Cisco ASA/FTD CVE-2026-76418, CVSS 3.1 score 8.6, exploited denial of service, added to CISA KEV 29 October.

Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: BLS; Fox Business; Yahoo Finance; IBTimes; Investing.com; OpenAI; Techzine; TechCrunch; Siemens ProductCERT SSA-834709; The Hacker News; Help Net Security; Cisco; Rescana.

Got something to say to this podcast? Send a voicemail, and you might hear yourself on the next episode!

G'day and welcome to Tech Talks with Kinsoft. Today we look at the Amadeus incident, in which unauthorised access to the travel technology provider's reservation systems exposed passenger records from several airlines.

Japan Airlines says around 92,000 customers are involved. All Nippon Airways says about 37,800 customers who booked between 10 August 2023 and 23 September 2026 may have been affected. Cathay Pacific reports about 53,000 bookings. Korean Air, Asiana Airlines and Condor also reported exposed information. Most records involve names, booking codes and flight details; a smaller group, around 2,000 at JAL and 1,700 at ANA, also had items such as passport numbers and contact details. The airlines say credit card details were not involved.

Korean Air and Asiana say the investigation points to unauthorised use of access credentials tied to an Amadeus system account. ANA says Amadeus detected the access on 24 September but did not tell ANA at that time. How the credentials were obtained has not been disclosed, and no attacker has been named.

We walk through the timeline, what was and was not exposed, and the lessons for any organisation that depends on a supplier holding its customers' data.

Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: Japan Airlines and ANA statements via TRAICY; Korean Air notice; The Korea Times; Escudo Digital; Bloomberg via The Star; eSecurity Planet.

Got something to say to this podcast? Send a voicemail, and you might hear yourself on the next episode!

G'day and welcome to Tech Talks with Kinsoft. Today we look at a breach at RMS Cloud, a booking-management software provider used by more than 6,000 hotels, holiday parks and serviced apartments worldwide.

In late October, guests of several Australian accommodation providers began receiving WhatsApp, SMS and email messages that referenced genuine booking details and claimed a payment had failed. Operators including BIG4 parks, Reflections Holidays and Summerstar Tourist Parks warned guests, and later reports named hotel and pub groups too. RMS says it is investigating, is working with cyber and forensic specialists, and that no payment card information was exposed from RMS.

What we know: names, contact details and booking dates were reportedly accessed, according to one council operator. What we do not know: how the attackers got in, how many guests are affected, or when the breach began. No attacker has been publicly named.

We walk through the timeline, why a "payment failed" message with real details is so convincing, what small and mid-sized operators can learn about supplier risk, and what to do if you have stayed at an affected property.

Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: ABC News; Cyber Daily; The Standard (Warrnambool); Insurance Business Australia; CISO AI.

Got something to say to this podcast? Send a voicemail, and you might hear yourself on the next episode!

G'day and welcome to Last Week in Tech from Tech Talks with Kinsoft. This is your roundup of the biggest technology and cybersecurity stories from 24 to 31 October 2026, through a business and IT lens.

In this episode:

PHP2Shell escalates. The two critical PHP flaws (CVE-2026-109618 and CVE-2026-109619, CVSS 9.2 per Tenable's CVSS v4 score) were added to CISA's Known Exploited Vulnerabilities catalogue on 26 October. Researchers at Dream Research report that an attacker, assessed by Palo Alto's Unit 42 as Chinese-speaking, chained them with a Linux kernel flaw to take root on 25 Palo Alto Networks PAN-OS firewall and management servers.

Tech sell-off. Alphabet fell sharply on 29 October, then Intel plunged about 29 per cent on 30 October after a weak forecast, and the Nasdaq closed down about 2.9 per cent. Investors want AI spending to turn into revenue.

AI agents. Security firm Cathedral says its AI agents reached internal Anthropic business systems in under 12 hours; Anthropic says only a limited set of sales, HR and IT systems was involved and disputes the broader claims. OpenAI says red-team agents escaped training sandboxes. And researchers show a booby-trapped AGENTS.md file can steer coding agents.

Third-party breaches. Quest Diagnostics says an unauthorised party accessed patient records on its Quanum lab platform, and airline reservation data is exposed through Amadeus. A holiday park booking platform breach also reached Australia, which we cover on Wednesday.

Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: CISA; Dream Research; Tenable; Palo Alto Networks Unit 42; Yahoo Finance; Reuters; InformationWeek; The Washington Post via Decrypt; OpenAI; Help Net Security; SEC filing (Quest Diagnostics); Privacy Guides.

Got something to say to this podcast? Send a voicemail, and you might hear yourself on the next episode!

Overnight on 11 to 12 October 2026, refrigeration controllers at supermarkets across France were reportedly driven into continuous defrost, warming fridges and freezers, with temperatures reported as high as 50 degrees Celsius. Several chains, including Intermarché, Coopérative U, Carrefour and Monoprix, were reported affected, and Leclerc says it was hit too; store counts vary widely by outlet, from about 250 to more than 500.

Reported so far: the Paris prosecutor opened an investigation into a large-scale attack on connected refrigerators; the French Prime Minister's office reportedly ordered the national cybersecurity agency, ANSSI, to investigate; and Thierry Cotillard, who heads Les Mousquetaires (Intermarché's parent group), estimated losses in the tens of millions of euros in a single day. Danfoss, the controller maker, says affected units ran outdated firmware that customers had long been urged to update or replace.

Not confirmed: who did it, and exactly how they got in. Earlier vulnerabilities in the Danfoss AK-SM 8xxA family are suspected but have not been confirmed as the route.

We cover what happened, why refrigeration is an internet-connected operational technology system, the research that warned of this, and what a small hospitality or retail business in Australia should do about its own cold rooms, air conditioning and CCTV controllers.

Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: BleepingComputer; Al Jazeera; Security Affairs; Claroty Team82; CISA advisory ICSA-25-140-03; Danfoss advisory DSA-2025-08-01.

Got something to say to this podcast? Send a voicemail, and you might hear yourself on the next episode!

On 12 October, Icon Group, the company behind Icon Cancer Centre, one of the largest dedicated cancer care providers in Australia, published a notice that someone had gained unauthorised access to patient information. Not in its core clinical systems, but in an externally hosted, third-party-managed system that converts faxes to email.

What Icon has confirmed: the unauthorised access, the type of system involved, that it believes the records are business correspondence documents rather than full patient files, that it has notified the Australian Federal Police and relevant regulators, that it has reset access and engaged forensic advisers, and that patient care continues.

What Icon has not confirmed: how many people are affected, exactly what data is involved, when the intrusion happened, or the name of the supplier.

What has been claimed, and is unverified: Cyber Daily reports that an actor calling itself "2019" posted a sale on a hacking forum claiming more than 31,000 documents with names, addresses, diagnoses and Medicare details. Icon has not confirmed those figures.

We walk through the timeline, why a fax gateway matters, what obligations apply under the Notifiable Data Breaches scheme, and what any organisation that sends health or financial documents by fax or email should ask its suppliers this week.

If you have been affected by a data breach, IDCARE offers free support in Australia and New Zealand.

Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: Icon Group notice (12 Oct, updated 15 Oct); Cyber Daily (original reporting; DataBreaches.net republished it); OAIC; IDCARE.

Got something to say to this podcast? Send a voicemail, and you might hear yourself on the next episode!

G'day and welcome to Last Week in Tech from Tech Talks with Kinsoft. This is your roundup of the biggest technology and cybersecurity stories from 10 to 17 October 2026, through a business and IT lens.

Ivanti Connect Secure zero-day. Volexity reported an authentication-bypass and code-execution flaw, CVE-2026-104935, exploited from around 3 October. It was chained with a third weakness, a privilege escalation to root, that has no CVE and no fix yet. Ivanti says a fix is due in the coming weeks, as of the end of last week.

A record Microsoft Patch Tuesday. Roughly 1,400 vulnerabilities fixed on 13 October, with experts pointing partly to AI-assisted discovery. We look at what that volume means for patching rhythm in a small team.

Cisco Secure Email Gateway. A flaw reported as exploited, with fixes that shipped a month before the advisory and no fix at all for the 16.0 release line.

ASD Essentials. The Australian Signals Directorate has launched the successor to the Essential Eight, moving away from the maturity-level ladder.

Ahold Delhaize. The retail group, with more than 9,400 stores, took systems offline after a security incident confirmed on 12 October. Cause and data impact are not yet known.

AI and the cost of fixing bugs. Bank of America's CEO described 1,000 contractors brought in to patch vulnerabilities surfaced by AI, and an Australian wealth firm has been penalised $1.35 million over cyber security failures.

Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: Volexity; Rapid7; The Hacker News; Dark Reading; CSO Online; BleepingComputer; Cyber Daily; ITnews; CNBC via Benzinga and ITPro; ASIC media release 26-244MR.