Date: 27/10/2022
Government proposes $50m data breach fines
Government proposes $50m data breach fines The Australian government will introduce new legislation to increase data breach penalties, with fines of up to $50m being proposed. Attorney-general Mark Dreyfus announced on 22 October that the Privacy Legislation Amendment (Enforcement and Other Measures) Bill 2022, is set to significantly increase fines in the event of serious […]
Read more
Date: 19/10/2022
Vinomofo data breach: 500,000 customers at risk after wine dealer hit by cyber-attack
Customers of Australian company Vinomofo are the latest victims of personal information exposure after the wine dealer suffered a major cyber-attack. Personal information including names, dates of birth, addresses, email addresses, phone numbers and genders of customers are at risk of exposure. It is not yet clear if all of Vinomofo’s 500,000 customers were exposed but […]
Read more
Date: 19/10/2022
Woolworths says 2.2 million MyDeal customers’ details exposed in data breach
Woolworths says 2.2 million MyDeal customers’ details exposed in data breach Millions of customers’ details have been exposed in a major data breach at an online shopping site owned by the retail giant Woolworths. In September Woolworths took an 80% stake in MyDeal, an Australian online shopping site, in a takeover worth more than $200m. MyDeal […]
Read more
Date: 13/10/2022
Medibank Private hit by cyberattack
Australian health insurer Medibank Private has been forced to take some of its customer-facing systems offline after being hit by a cyberattack. Health insurer Medibank Private hit by cyber attack – ABC News Medibank’s ahm and international student policy management systems are currently offline. Medibank is still seeking to confirm that no sensitive information from […]
Read more
Date: 11/10/2022
ACSC Flags Microsoft Exchange Vulnerabilities
ACSC flags Microsoft Exchange vulnerabilities The Australian Cyber Security Centre (ACSC) has reported two new zero-day vulnerabilities in Microsoft Exchange Servers 2013, 2016, 2019. Microsoft published a list of the common vulnerabilities and exposures (CVEs), assigned to: CVE-2022-41082 – remote code execution vulnerability CVE-2022-41040 – elevation of privilege vulnerability Also noted are Historical CVEs related to ProxyShell, […]
Read more
Date: 27/09/2022
Optus Hacked: Customers warned to check in with their banks after personal data exposed
Optus hacked; customers warned to check in with their banks after personal data exposed Last Thursday, Optus alerted its customers of the security breach and confirmed that the attack was quickly identified and shut down. However, the telco’s 11 million customers have been urged by cyber security experts to be extra vigilant of potential threats […]
Read more