Outdated technology and weak digital safety skills are the biggest threats to national cybersecurity, according to the latest Cyber Threat Report from the Australian Signals Directorate. The public sector recorded nearly half of the 1500 incidents reported to the Australian Cyber Security Centre in the past financial year. Director-general Abigail Bradshaw warned that service outages will likely become normal and urged companies to put security ahead of access. Medium-sized businesses reported a 45 per cent rise in cybercrime losses, with an average cost of $141,300.
不少西澳居民可能因使用容易被猜到的密码（如123456和password）而让账户暴露在黑客面前。州政府审计发现，七个政府机构在管理其Microsoft 365系统的方式上存在薄弱环节，增加了遭受网络攻击和数据泄露的风险。Department of Education（教育部）另行发出警告称，与Canvas学习系统相关的2026年5月事件可能影响了姓名、电子邮件地址和员工编号。专家建议使用强度高且不重复的密码或口令短语，并尽可能启用多重身份验证。
支撑超过70%网站运行的编程语言PHP中的一个严重漏洞已被公开。若不加修复，黑客可能借此接管数百万个网站及其服务器上的数据。包括Port of Rotterdam（鹿特丹港）在内的多个欧洲政府及运营方已将相关网站下线。澳大利亚的Signals Directorate（信号局）以及其他国家的类似机构已敦促开发者尽快应用更新。补丁已经发布，但要在数百万个系统中全部应用仍需时间。
The developers of the PHP programming language are releasing patches for two critical vulnerabilities. PHP is used across large parts of the internet. Its security update rates both flaws 9.2 out of 10 on the CVSS v4.0 severity scale and urges users to upgrade once the release is available. The European Union Computer Emergency Response Team warned the flaws could allow attackers to run malicious code without logging in, and advised organisations that cannot patch to consider taking affected sites offline. The Australian Cyber Security Centre said it is not aware of active exploitation.
