A critical vulnerability affecting Google's Brotli decompression library was disclosed, potentially exposing applications to memory corruption and remote code execution (RCE).

On 21 October 2026, two critical vulnerabilities affecting PHP were publicly disclosed, raising serious concerns for organisations running PHP-based websites and applications, including well-known CMS such as WordPress, Drupal and Joomla.

Somewhere out there is a subdomain nobody at your company remembers creating.

For nearly a decade, the Essential Eight has given Australian organisations a practical baseline for reducing common cyber risks. That baseline is now entering a transition period.

A customer database is exposed. An attacker gains access to your web application. An employee discovers that personal information may have been downloaded without authorisation.

Earlier this year, Gartner introduced Continuous Offensive Security Testing, or COST, as a framework for rethinking how organisations approach offensive security validation.