Tech Talks With Kinsoft

On 14 April 2026, Carnival Corporation detected unauthorised activity after a bad actor used social engineering to compromise an employee account. In this episode of Tech Talks with Kinsoft, we cover the global breach that affected roughly 5,995,277 individuals — almost 6 million — the categories of data potentially involved, the timeline through to the company's customer notifications and dedicated breach webpage on 27 May 2026, and the support offered including complimentary credit monitoring. It's a reminder that human-targeted attacks remain one of the most effective ways in.

Worried about social engineering and account takeover? Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: News4Jax; Hoplon InfoSec.

VSP Solutions, a NSW distributor of video-security hardware (Hikvision, Axis and similar), became aware of an incident on 13 May 2026; the Stormous group listed it on 23 May claiming 40 GB+ including financial backups, email archives, staff folders and customer and client databases. VSP's position is that the affected data was historical and related-business and that current operations were unaffected. A lens on distributor and supply-chain risk and protecting archived data.

Sit in someone's supply chain? Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: Cyber Daily.

Your Monday catch-up, with a security lens. This week: Google goes all-in on agents at I/O 2026 with Gemini 3.5 and a new any-input video model, Gemini Omni. Three rival coding agents launch in three days as the price of frontier coding power keeps falling. SpaceX's S-1 lifts the lid on xAI's finances, and Anthropic teams up with the Gates Foundation on a $200M global-development push. On security: a CISA contractor accidentally exposes AWS GovCloud keys on a public GitHub repo, Canadian police arrest the alleged operator of a massive IoT botnet, and a Vietnamese government network is breached.

Building or buying AI tools and not sure how to keep your secrets out of public repos? Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: Tech Startups; Medium (David Akpovi); Digital Applied; The Hacker News; cm-alliance.

In early January 2026, fiber-broadband provider Brightspeed opened a cybersecurity investigation after a group calling itself Crimson Collective claimed via Telegram (4 January) to have stolen data on more than 1 million customers, sharing screenshots and small samples as purported proof. The claimed data included account master records — names, emails, phone numbers, billing and service addresses and account metadata — with the group alleging payment histories and masked card details may have been accessed. As of mid-January the company had not confirmed exfiltration or a production-system compromise; the claims remained unverified, and class actions followed. We cover how to assess unverified extortion claims.

Unsure whether a leak claim against you is real? Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: SecurityWeek; eSecurity Planet.

In May 2026, Tasmanian hospitality group Goodstone Group — which runs hotels, restaurants, bars and bottleshops across northern Tasmania — confirmed it was responding to a cyber incident after the CMD Organization ransomware group listed it on a dark web leak site. In this episode of Tech Talks with Kinsoft, we cover the sensitive material the attackers published as proof, including employee passport scans, a confidentiality agreement and bank reconciliation details, the roughly $1 million (9 BTC) extortion demand, and the company's response as it engaged security experts and authorities.

Worried about ransomware hitting your business? Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: Cyber Daily.

Your Monday catch-up on the week that was, with a security lens. This week: researchers document the first known case of attackers using AI to develop a working zero-day exploit. OpenAI launches a $4B Deployment Company and buys consultancy Tomoro to get AI into enterprises faster, while SoftBank pours money into AI data centres and batteries. On the breach desk: ShinyHunters complete what's now called the largest education-sector breach on record, defacing Canvas login portals at around 330 institutions — including Harvard and Princeton — before Instructure paid up. Plus Washington turns up the heat on AI, with the Pentagon flagging a major AI lab as a supply-chain risk.

Worried about AI-accelerated attacks on your own systems? Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: Tech Startups; Coaio; cm-alliance; SharkStriker; TechCrunch.

Edtech giant McGraw Hill confirmed a breach (dated around 10 April 2026, surfacing mid-April) after ShinyHunters' extortion threat; about 13.5 million accounts were exposed — emails, names, phone numbers and physical addresses — via a Salesforce misconfiguration. When negotiations failed, the group published over 100 GB of data. McGraw Hill said the exposed data was limited and did not include Social Security numbers, financial information or student data from its learning platforms. We discuss misconfiguration risk and the limits of non-sensitive data.

Need a configuration and exposure review of your SaaS estate? Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: BleepingComputer; The Register.

In early May 2026, the SafePay ransomware group listed Energy Action — an Australian firm that manages energy procurement for a large share of the country's commercial businesses — on its dark web leak site, threatening to release stolen data. In this episode of Tech Talks with Kinsoft, we cover what Energy Action does, the kind of data potentially at risk, the fact that the volume and specifics had not been confirmed, and background on SafePay, an active global threat that notably does not operate as ransomware-as-a-service. Throughout, we flag where claims are alleged rather than confirmed.

Concerned about ransomware exposure in your business or supply chain? Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: Cyber Daily.

Your Monday catch-up, with a security lens. This week: Microsoft makes its AI agents generally available at Build, and the ShinyHunters Canvas breach escalates into what's being called the largest education-sector breach on record. On security: certificate authority DigiCert is socially engineered into issuing fraudulent code-signing certs, and Zara and an NVIDIA cloud-gaming partner are breached.

Confident your staff can't be talked into handing over access? Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: Microsoft; The Hacker News; CNN; Comparitech; CM-Alliance.

ShinyHunters listed Medtronic on its leak site on 17 April 2026, claiming more than 9 million records; Medtronic confirmed the breach on 24 April alongside an SEC Form 8-K, stating an unauthorized party accessed data in certain corporate IT systems. Potentially affected data included names, addresses, certain medical details, billing and health-insurance information, demographics and Social Security numbers. Medtronic said it found no impact to products, patient safety, manufacturing and distribution or financial-reporting systems. We place it in ShinyHunters' wider Salesforce and SSO extortion campaign.

Worried about corporate-IT and Salesforce exposure? Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: SecurityWeek; Infosecurity Magazine.