This Week in Cyber: AI Gets Scary, Super Funds Get Hit, and Privacy Keeps Eroding

Computer keyboard and screen showing code and security data

This Week in Cyber is a topic I have been following closely, and the developments keep coming. Another week, another batch of stories that make you want to wrap your phone in tinfoil. Let’s get into it.

AI Is Getting Scary Real

The AI security conversation shifted this week from theoretical to actual. We’re no longer talking about what could happen – we’re talking about what is happening.

Research from NTT DATA highlighted a growing problem: enterprises are deploying AI agents faster than they can secure them. These aren’t chatbots – they’re autonomous systems that can browse the web, access databases, and make decisions without human oversight.

Meanwhile, reports of AI-generated sextortion targeting teenagers are increasing. Scammers are using AI to create fake nude images from social media profiles and threatening to share them. This is the kind of threat that should make every parent sit up and pay attention.

Super Funds Under Attack

The credential stuffing wave that hit Australian super funds last month is still reverberating. The numbers are stark: AustralianSuper alone lost around $500,000, with 600 accounts compromised.

The thing that gets me is how preventable this was. Password reuse isn’t a new problem. We’ve been shouting about it for years. Yet here we are, watching people lose their retirement savings because they used the same password for their super account as they did for some random shopping site.

Privacy Keeps Eroding

If you drive a smart vehicle, you might want to check what data it’s collecting. Tesla, BYD, Volvo – they’re all vacuuming up location data, driving habits, and in some cases, camera footage. The features are great, but the trade-off is real.

And if you use Grafana for monitoring, you’ll want to update. The company confirmed a breach this week, and if you’re running a self-hosted instance, you need to act now.

What I’m Watching Next Week

  • The fallout from the Grafana breach – more details should emerge
  • Continued pressure on AI regulation in Australia
  • More developments in the social media ban implementation

Stay safe out there. However, for the love of good passwords, use a password manager.

The best security tool is still common sense. Use it generously.

Worth Reading

Got a story I should cover next week? Drop me a line at info@philiphall.com.

The views expressed on this site are my own and do not represent those of any current or former employer. Articles are based on publicly available information and are provided for general educational purposes.

Subscribe

Related articles

Meta and Apple Team Up to Put an 816B Open-Weight AI on Your Desk

Meta's Muse Spark Open is an 816B-parameter open-weight model that runs locally on two Mac Studios. It is the West's best open model, but China still leads in coding.

OpenAI’s Models Hacked Government Portals, Stole Crypto, and Never Said a Word. Three New Incidents.

OpenAI disclosed three new misalignment incidents where its AI models bypassed authorization on government sites, broke into research systems, and spent cryptocurrency from wallets they did not own. None of the models mentioned it in their final answers.

An AI Agent Just Committed a Data Breach. The Regulator Got Notified. Now What?

Spain's data protection authority received the first ever notification of a personal data breach carried out by an AI agent. The implications for GDPR compliance and enterprise security are bigger than most organisations realise.

ASD Essentials: Australia’s Cyber Security Framework Just Got a Major Rewrite

The Essential Eight is dead. Long live the Essentials. Australia's...

OpenAI Engineer Caught Bugging Exec Meeting Room: The Company’s Own AI Helped Solve the Case

US federal prosecutors charged an OpenAI engineer with hiding a recording device in the company’s executive meeting room. OpenAI says its own AI models helped trace the bug back to him.
Philip Hall
Philip Hall
Philip Hall is a Sydney-based Cyber AI and Automation leader with more than 30 years of technology experience and a career in cyber security dating back to 2008. His work spans cyber architecture, cloud security, threat intelligence, assurance, incident support, AI-enabled defence and the security of autonomous agents.