All Episodes

Last Week in Tech - Ivanti's Unpatched Chain, a Record 1,400-Fix Patch Tuesday, and the Essential Eight Gets a Successor

ASOS - One Phished Login, a Hijacked Push Notification, and the Marketing Tools Nobody Was Watching

St Andrew's Hospital - Patient Data Downloaded, a Limited Statement, and the Exemption Health Never Had

Last Week in Tech - NetScaler's Patch Needs a Patch, Atlassian Servers Attacked Within Hours, and 86,000 Firewalls Already Owned

Fakturownia - 600,000 Businesses, 38 Hours Inside, and the Invoices Built for Payment Fraud

Stake - A Breach at the Broker Behind the Broker, and the Closed Accounts Still on File

Last Week in Tech - Citrix's Shut-It-Down Weekend, a Mail Gateway With No Patch, and the AI Price War Arrives

BigCommerce - One Stolen App Key, Hundreds of Stores, and the Plugin You Forgot You Installed

Services Australia - The AI Agent That Wouldn't Take No, and the Email in a Once-a-Day Inbox

Last Week in Tech - F5 and Check Point Under Fire, a $387 Million Spoofed Approval, and AI Agents Go Carding

Boston Scientific - One Network Box, Two Weeks Without Shipping, and Nothing Encrypted

Canva - The Feedback Tool With a Key to the CRM, and the Regulator That Went First

Last Week in Tech - Cisco's Double Zero-Day, the Region AWS Can't Bring Back, and Canberra's 72-Hour Breach Clock

JetBrains - The Patch They Wrote, the Server They Missed, and the Backup From 2024

Mathspace - 1,079,819 People, a 23-Day Gap, and the Advisory That Never Reached Anyone

Last Week in Tech - The Biggest Patch Tuesday Ever, a 10.0 With No Patch to Apply, and Oracle's $664 Billion Round Trip

153 Million Driver's Licences - The Scanner at the Front Desk, and the Shop That Sold What It Saw

PaperCut - 9:42 on a Thursday, Three Emergency Patches, and the Bug the Founder Wrote Himself

Last Week in Tech - Nvidia Buys Hugging Face, GPT-6 Crosses the Cyber Line, and Seven Exploited Flaws in a Day

Manchester Airports Group - 8.7 Million Travellers, and the API Keys Sitting in Plain Sight

Quest Apartment Hotels - 1.5 Million Guest Records, and the Attacker Who Never Touched Quest's Systems

Last Week in Tech - Nvidia Doubles, Meta Pays $18 Billion, and the Musk-Altman Feud Reaches Your Code Editor

Metabase - The Reporting Tool That Held Every Key, and the Five Companies That Found Out

Bendigo Bank - 1,598 Accounts, One Password, and the $8 Million Bill That Arrived Three Years Later

Last Week in Tech - Nvidia Turns GPUs Into an Asset Class, the AI Price War Breaks Out, and an AI Agent Goes to War

N-able N-central – God Mode on the Management Plane, and the Hotfix That Wasn't Enough

Court Services Victoria – A Hearing-Link List, 28,600 Lines, and the Victims Nobody Can Name

Last Week in Tech – Google Reshuffles Its AI Empire, Washington Writes a Rulebook It Won't Show You, and Memory Sold Out to 2030

Thirty Towns Without Water Controls – Minnesota, Rigged PLCs, and the Bug That Can't Be Patched

GO2 Health – A Veterans' Clinic, One Mailbox, and the Twelve Weeks Nobody Was Told

Last Week in Tech – A Record $450 Billion Day, $720 Billion of AI Capex, and the Memory Bill Landing on Your Desk

SonicWall SMA1000 – Zero-Days at the Edge, Stolen MFA Seeds, and a Password Called admin:admin

Lifeline Australia – A Serial Hacker, Doctored Data, and the Charity Sector's Security Gap

Last Week in Tech – Claude Opus 5, a Patchless Java Zero-Day, and EY's Support-Desk Breach

When the Hacker Was the AI – How OpenAI's Own Models Breached Hugging Face

Origin Energy – A 3:40am Email, an Extortionist Called "John Doe", and Millions of Customers in Limbo

Last Week in Tech – The AI Capex Reckoning, AMD's Anthropic Deal, and WordPress Under Attack

Coca-Cola's Fairlife – The Ransomware Attack That Stopped the Milk

Partnered Health – A GP Network Breach, 21 Clinics, and a Court Order Against Criminals

Last Week in Tech – China's Open-Source Shock, TSMC's Record Quarter, and a 570-Flaw Patch Tuesday

AssuranceAmerica – One Stolen Password, Seven Million Exposed

Teletrac Navman – 3,000 Fleets' Live GPS Data Allegedly Up for Sale

Last Week in Tech – The AI Boom's Memory-and-Power Bill, Microsoft's 4,800 Cuts, and a Perfect-10 ColdFusion Flaw

DHS HSIN – When "Unclassified" Doesn't Mean "Low Risk"

Reynella East College – Interlock's First Australian Victim Dumps 600GB of School Data

Last Week in Tech – Big Tech's "We'll Build It For You" Land Grab, a Cheaper Claude, and a CitrixBleed Sequel

Nissan – ShinyHunters Turn an Oracle Zero-Day into a Payroll Nightmare

Mackay Sugar – "The Gentlemen" Ransomware Halts Australia's Sugar Heartland

Generation Life – A Third-Party Breach Reaches the Financial Sector

Last Week in Tech – Anthropic vs Alibaba, OpenAI's Own Chip, and an Emergency Cisco Patch

KDDI – One Flaw, Six ISPs, 14 Million Exposed Mailboxes

NSW Rural Fire Service – Nova Ransomware Hits an Emergency Service

Last Week in Tech – SpaceX Buys Cursor for $60B, Washington Pulls Anthropic's Top Models, and the Klue Breach Spreads

Texas Parks & Wildlife – 3 Million Licences Exposed in a Vendor Breach

Mackay Sugar – "The Gentlemen" Ransomware Halts Australia's Sugar Heartland

Last Week in Tech – Apple's Gemini-Powered Siri, ShinyHunters Hit PeopleSoft, and the AI-Chip Land Grab

Under Armour Breach – 72 Million Customer Accounts Exposed

Champion Homes Data Breach – Inside the DragonForce Ransomware Attack

Last Week in Tech – Copilot's Billing Backlash, SoftBank's €75B France Bet, and the Klue OAuth Supply-Chain Hit

Charter/Spectrum – ShinyHunters Vishing Breach

Gelatissimo Data Breach – DragonForce and the 352GB Heist

Last Week in Tech – Anthropic's $900B Round, AI Guardrails Stripped in Minutes, and Trellix's Source-Code Breach

Carnival Corporation Breach – 6 Million Cruise Customers Exposed

VSP Solutions – Stormous Hits a Security-Hardware Distributor

Last Week in Tech – Google's Agentic Gemini, the Coding-Agent Gold Rush, and CISA's Own Key Leak

Brightspeed – Crimson Collective Claims 1M+ Records

Goodstone Group Breach – Passport Scans Leaked in CMD Ransomware Attack

Last Week in Tech – AI Writes Its First Zero-Day, OpenAI's Deployment Play, and the Canvas Mega-Breach

McGraw Hill – 13.5M Exposed via Salesforce Misconfig

Energy Action Breach – SafePay Ransomware Targets an Energy Giant

Last Week in Tech – Microsoft's Agents Go GA, the Canvas Mega-Breach Escalates, and DigiCert's Cert Compromise

Medtronic – ShinyHunters Hits a Medical-Device Giant

Canvas LMS Data Breach – Australian Schools and Universities Hit

Last Week in Tech – OpenAI Breaks Its Microsoft Lock-In, Big Tech's $650B AI Bill, and the Salesforce Breach Wave

France's ANTS ID Registry – 11.7M Accounts Exposed

Gregory Jewellers Data Breach – Kairos Ransomware Claims 574GB

Last Week in Tech – Meta's 8,000 Job Cuts, Medtronic's Breach, and a $290M Crypto Heist

ADT – ShinyHunters Vishing Breach Hits 5.5M

NSW Treasury Insider Breach – 5,600 Sensitive Documents Exfiltrated

Last Week in Tech – Patch Tuesday's Two Zero-Days, Rockstar's Vendor Breach, and Amazon's $11.6B Satellite Bet

Booking.com – Hotel-Partner Breach Fuels Travel Scams

3P Corporation – Space Bears Claims a Melbourne Finance Firm

Last Week in Tech – Anthropic's Exploit-Writing Model, Meta Goes Closed-Source, and a Critical Notebook RCE

Foster City, California – Ransomware Halts a City

Qilin's WA Spree – Esperance Metaland

Last Week in Tech – OpenAI's $122B Round, Oracle's Mass Layoffs, and a Backdoor in a Top npm Package

Qilin Ransomware Hits Germany's Die Linke Party

Qilin Hits WA's Mount Barker Co-operative

Last Week in Tech – OpenAI Pulls the Plug on Sora, a Court Backs Anthropic, and Hacktivists Claim a Lockheed Haul

Stryker – Pro-Iran Wiper Attack Disrupts a Medtech Giant

DragonForce Hits Australian Health Software Vendor HMS

Last Week in Tech

Ivanti Zero-Days Breach the EU Commission & Dutch Govt

Five Eyes Warning – INC Ransom Targets Australian Healthcare

Last Week in Tech – OpenAI Buys an AI-Security Startup, Anthropic Sues the Pentagon, and a Wiper Hits Stryker

France's FICOBA Registry Breach – 1.2M Bank Accounts

WA Government – Systemic Microsoft 365 Security Failures

Last Week in Tech – GPT-5.4's Computer-Use Leap, and a Brutal Week for Healthcare Data

UNC3886 – China-Linked Espionage Hits Singapore's Telcos

Australian Court Files Sent Offshore – A Data-Sovereignty Failure