Tech Talks With Kinsoft

Your Monday catch-up on the week in tech, with a security lens. This week the real AI story wasn't a model — it was the physical bill coming due. Samsung posts a record quarterly profit, up nearly nineteen-fold, on AI-memory demand; SK Hynix raises around 29 billion dollars in one of the biggest-ever US share listings; and Britain's National Grid tips 1.75 billion into a US power project built to feed a single Microsoft data centre. Microsoft cuts about 4,800 jobs and overhauls Xbox as it reallocates toward AI. Europe's top court makes Google's 4.1-billion-euro Android fine final. And on the security desk: a perfect-10 Adobe ColdFusion flaw (CVE-2026-48282) is exploited within two hours of disclosure and draws an emergency CISA patch order, Accenture confirms a breach after a criminal offers stolen data for sale, and INTERPOL's Operation First Light nets 5,811 arrests and 293 million dollars.

Trying to work out what all this means for your hardware budget and your patch queue? Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: Reuters; CNBC; Bloomberg; Samsung; TechCrunch; DataCenterDynamics; Adobe; CISA; BleepingComputer; SecurityWeek; Help Net Security; INTERPOL.

A breach at the heart of America's homeland-security apparatus - and a masterclass in why "unclassified" is not the same as "unimportant." The US Department of Homeland Security has confirmed that attackers broke into the Homeland Security Information Network, or HSIN - the platform it uses to share sensitive-but-unclassified information with thousands of federal, state, local and private-sector partners, and one currently helping coordinate security for the 2026 World Cup. Classified systems were untouched, but what the intruders took, and who they are, remains unknown. We dig into the danger of "sensitive-but-unclassified" data, why legacy collaboration systems are prime targets, and how to communicate honestly when you know attackers got in but not yet what they took.

Do you know how your own data is classified - and protected accordingly? Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: BleepingComputer; Nextgov/FCW; TechCrunch; PYMNTS; UpGuard.

A confronting Australian breach that puts schools squarely in the firing line. Reynella East College - a public preschool-to-Year-12 school in Adelaide's south with more than 1,900 students - took its computer systems offline for a week after a cyber security breach, and weeks later the ransomware group Interlock dumped what it claims is 610 gigabytes of stolen data on the dark web. It's Interlock's first known attack on an Australian organisation, and a review of the leak reportedly turned up passport scans of international students and staff and lists of passwords stored in plain text. We unpack how schools became fair game, why identity documents and cleartext passwords are the worst possible things to lose, and how to tell what's confirmed from what's just a criminal's claim.

Worried about what's sitting in your own file shares? Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: Cyber Daily; Comparitech; Insurance Business Australia; EducationHQ; ransomware.live.

Your Monday catch-up on the week that was in tech, with a security lens. This week: the AI giants pivot from selling software to selling people - Microsoft stands up a 2.5-billion-dollar "Frontier Company" to embed its own engineers inside your business, just two days after Amazon committed a billion to the same idea. Anthropic ships Claude Sonnet 5, a cheaper model built to run autonomous agents. Money keeps pouring into the AI plumbing, with Together AI raising 800 million and Meta reportedly building a cloud business of its own. And on the security desk: a CitrixBleed-style flaw in NetScaler is exploited within a day of its patch, researchers document the first ransomware run end-to-end by an AI agent, and a 19-year-old alleged member of Scattered Spider is extradited to the US.

Trying to work out what all this means for your own tech stack and your patch queue? Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: CNBC; TechCrunch; GeekWire; Anthropic; Bloomberg; Business Wire; SecurityWeek; The Hacker News; BleepingComputer; Sysdig; watchTowr; US Department of Justice.

The Oracle PeopleSoft campaign we've been tracking just claimed a big-name victim. Nissan has disclosed that employee data across the Americas — potentially including bank details, Social Security and national ID numbers — was stolen when the extortion crew ShinyHunters exploited a critical PeopleSoft zero-day. We break down CVE-2026-35273, the two-week window when attackers were inside before a patch even existed, why HR and ERP systems are crown-jewel targets, and the smart, concrete fraud controls Nissan put in place afterwards.

Do you know what's exposed on your internet-facing enterprise apps? Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: BleepingComputer; The Register; The Hacker News; Google/Mandiant.

An Australian ransomware story you can taste. Mackay Sugar — the country's second-largest raw sugar producer — was hit by the ransomware crew "The Gentlemen" right at the start of the North Queensland crushing season, forcing shutdowns at two of its three mills and leaving 1,300-plus cane-farming families with nowhere to send their harvest. We unpack how an attack on IT systems becomes a physical, region-wide supply-chain problem, why critical infrastructure and agriculture are increasingly in the crosshairs, and what "operational technology" risk really means for Aussie businesses.

Worried a cyber incident could stop your operations, not just leak your data? Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: SecurityWeek; Cyber Daily; The Record; Mackay Sugar incident updates.

Australian life-investment firm Generation Life has confirmed that some customers' personal information was caught up in a cyber attack it first disclosed back in April — an incident that came in through an external service provider and was later claimed by the Qilin ransomware group. We follow the long tail of a breach: how an April intrusion, a May leak-site listing and a late-June confirmation all belong to the same story, why third-party access is the recurring weak point, and what multi-regulator notification looks like for an APRA-regulated business.

Do you know exactly what your service providers can reach? Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: Cyber Daily; Insurance Business Australia; Money Management.

Your Monday catch-up, with a security lens. This week: Anthropic takes an extraordinary allegation to US lawmakers, accusing Alibaba's Qwen team of the largest-ever "distillation attack" on Claude. OpenAI and Broadcom unveil "Jalapeño," OpenAI's first custom AI chip. Qualcomm spends nearly $4 billion buying Modular to chip away at Nvidia's CUDA lock-in. And CISA orders an emergency patch of an actively-exploited flaw in Cisco's phone-system software.

Wondering whether that Cisco flaw affects you? Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: CNBC; OpenAI; Bloomberg; CISA; BleepingComputer; The Hacker News; Help Net Security.

A single vulnerability in one shared platform cascaded across six Japanese internet providers, exposing up to 14.2 million email accounts. Telecoms giant KDDI has confirmed a breach of a shared email system used by KDDI, JCOM, NIFTY, BIGLOBE and others — an intrusion via a flaw in third-party software. We look at "shared-infrastructure blast radius": how concentration risk turns one weakness into millions of victims, why exposed email logins are gold for credential-stuffing, and the transparency questions KDDI has left unanswered.

Do you know how many of your services depend on one shared platform? Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: BleepingComputer; SecurityAffairs; The Japan Times.

The NSW Rural Fire Service — the world's largest volunteer fire service — has confirmed a cyber security incident, reported as Australia's first confirmed ransomware attack on a government agency in 2026. The entry point? A single compromised account and the remote-access system behind it. The ransomware crew "Nova" claims to have stolen 300 gigabytes of data — a figure the RFS has not confirmed. We dig into the compromised-account-plus-remote-access playbook, and the very real gap between what an attacker claims and what a victim can verify.

Is your remote access as locked down as you think? Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: Cyber Daily; Comparitech; ACS Information Age.