hear directly from us while we work to establish the facts." Who is the hacker? The hacker, who goes by the online name 2019, appears to be the same threat actor who recently targeted the Melbourne International Film Festival. A few days before sharing...

festival and had compromised more than 340,000 MIFF customers. In a post dated 30 May, the hacker – who calls themselves 2019 – said the data included addresses, customer IDs, email addresses, names, as well as membership and purchasing data. The data...

which formed in August 2025 and was responsible for several Salesforce compromises. ShinyHunters itself dates back to 2019. The group is known for its technical and social engineering skills. Previous victims include Qantas, Jaguar Land Rover, PornHub,...

impacts the following product versions: Microsoft Exchange Server Subscription Edition RTM Microsoft Exchange Server 2019 Cumulative Update 15 Microsoft Exchange Server 2019 Cumulative Update 14 Microsoft Exchange Server 2016 Cumulative Update 23...

which formed in August 2025 and was responsible for several Salesforce compromises. ShinyHunters itself dates back to 2019. The group is known for its technical and social engineering skills. Previous victims include Qantas, Jaguar Land Rover, PornHub,...

nature of legal industry data.” The Conti ransomware group, which SRG is descended from, was first observed in late 2019 and disbanded over arguments regarding the Russian invasion of Ukraine in 2022. Groups that are thought to be made of refugees from...

and “everyday life”. “Consumer reliance on telecommunications is far greater today than when the current code was made in 2019. The harms to consumers are also greater when services are unavailable or protections are lacking,” O’Loughlin said “Recent...

security measures. Justice Derrington declared that FIIG contravened section 912A of the Corporations Act between 13 March 2019 and 8 June 2023 across three distinct limbs: failing to have adequate financial, technological and human resources...

with major technology suppliers. A recent review found that those agreements delivered $1.6 billion in discounts between 2019 and 2024, while also strengthening legal protections and supporting more than 10,000 Australian jobs through supplier...

program” on its darknet leak site, where it is actively recruiting for affiliates. “We have been working since September 3, 2019, and we are not going to stop, no matter how much the intelligence services around the world want us to stop,” the group...

and the court found that FIIG had failed to adequately protect its customers’ data over a four-year period between March 2019 and June 2023. FIIG Securities was also ordered to pay $500,000 to the Australian Securities and Investments Commission (ASIC),...

its investigation found that FIIG Securities failed to protect the data of 18,000 clients for over four years, between March 2019 and June 2023, by not having an effective cyber incident response plan and not investing enough money, resources, staff or...

FreePBX said in November. “An attacker could leverage this to obtain remote access to the system as the asterisk user.” CVE-2019-19006 is an incorrect access control vulnerability impacting Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below,...

its mission.” Kinetic IT has been used by the Defence’s ICT sector since its first contract for an ICT Service Desk in 2019, providing technological and digital support to “mission-critical environments”. “This agreement recognises the strength of our...

catalogue on the day of its publication. This zero-day is a security feature bypass vulnerability impacting Microsoft Office 2019 and has a high severity CVSS score of 7.8. According to Microsoft, “reliance on untrusted inputs in a security decision in...

all four LHDs had plans that were “not fit-for-purpose”. With none of the LHDs implementing the NSW Cyber Security Policy (2019) that requires state bodies to “establish, implement and maintain controls” across the ICT and cyber domain, this puts NSW...

the personal information of six donors and 5,000 former students and alumni was stolen from data sets between 2010 and 2019. Gower added that the university believes no data has yet been published. “We have found no evidence of misuse but will...

used to connect point-of-sale devices, went end-of-life in August 2021, and the vulnerability was first disclosed in 2019. According to the CVE record, this vulnerability could lead to remote code execution via a specially crafted HTTP request. Cyber...

a critical issue, and it is present in the Microsoft Windows Server Update Service in Windows Server (versions 2012, 2016, 2019, 2022 and 2025). “Australian organisations should review their networks for use of vulnerable instances of the Windows Server...

which the government said will aid it in identifying and preventing identity fraud and with secure service access. In 2019, both Victoria and Tasmania submitted licences and photos to a system that would later interface with the NDLFRS, with South...