Cyber Investigations

In this episode, we break down four major cybersecurity stories showing how modern attacks are shifting from traditional malware to identity abuse, cloud compromise, endpoint telemetry, and security-tool exploitation. First, we look at Accenture’s confirmed “isolated matter” after a criminal attempted to sell an alleged 35GB data haul containing source code, keys, Azure tokens, and cloud credentia...

In this episode, we break down four major cyber security stories shaping the threat landscape: North Korean hackers targeting developers through malicious open-source packages, the new PamStealer macOS malware using stealthy AppleScript and Rust-based tradecraft, prompt injection research showing how LLMs can be manipulated through role confusion, and Google’s disruption of the NetNut residential...

In this week's episode, we break down four major cybersecurity stories that are shaping the threat landscape in 2026. We start with the Australian Signals Directorate's announcement that the Essential Eight cyber security framework will be retired over the next two years and replaced with a broader security model covering cloud, operational technology and AI. We examine what this means f...

This week on cyber investigations we dive into stories that reveal how the next generation of cyber threats extends far beyond traditional hacking. First, we break down a sophisticated campaign involving malicious npm packages disguised as legitimate PostCSS tools . Learn how attackers weaponise the JavaScript ecosystem, abuse post-install scripts, steal cloud credentials, compromise CI/CD pipelin...

For tips, feedback or story suggestions, business contact: cyberinvestigationsau@gmail.com In this episode of Cyber Investigations Australia, we break down three major cyber security stories making headlines: Copy Fail, the new Dirty Frag Linux kernel privilege escalation exploit, and the reported Canvas LMS hack linked to ShinyHunters. We explain how Linux kernel vulnerabilities can allow attacke...

Australia’s cyber defence landscape is shifting fast. In this episode, we break down two major cyber security stories: the expansion of the Microsoft-ASD Cyber Shield, known as MACS, across more Australian federal government agencies, and the urgent cPanel patches for an actively exploited authentication bypass zero-day. We unpack what the Microsoft-ASD partnership means for government cyber secur...

n this episode, we unpack Citizen Lab’s “Bad Connection” report, which reveals how covert surveillance actors exploited the hidden infrastructure of global telecommunications networks. Rather than hacking a phone directly, these actors abused telecom signalling systems and trust relationships between mobile operators to attempt location tracking at the network level. We explain the technical found...

In this episode, we unpack the alleged NSW Treasury data breach that has sent shockwaves across the New South Wales government. A Treasury staff member has been arrested and charged after allegedly downloading 5,600 commercially sensitive government documents, triggering a significant cyber incident and a whole-of-government response. We break down what reportedly happened, why the breach is so se...