Recent articles by Juha Saarinen

ASD’s Essential Eight replacement moves away from maturity ladder

ASD’s Essential Eight replacement moves away from maturity ladder

Organisations will report security area by area.
Juha Saarinen Oct 15 2026 6:28AM Security
Microsoft floats "risk cohorts" as patch load hits record size

Microsoft floats "risk cohorts" as patch load hits record size

Tsunami of monthly fixes tops 1400 in October.
Juha Saarinen Oct 14 2026 4:44PM Security
US raids 40 laptop farms for North Korean IT workers

US raids 40 laptop farms for North Korean IT workers

But researchers expect disruption of "Famous Chollima" to be short-lived.
Juha Saarinen Oct 14 2026 4:42PM Security
Attackers chain three Ivanti VPN zero-days for root access

Attackers chain three Ivanti VPN zero-days for root access

One of the flaws awaits fix.
Juha Saarinen Oct 14 2026 6:46AM Security
Defence quiet on Australia's role in Five Eyes AI program Arcadia

Defence quiet on Australia's role in Five Eyes AI program Arcadia

As New Zealand puts six-year build on Arcadia participation.
Juha Saarinen Oct 13 2026 6:52AM Security
ASD joins seven-nation alert as US seizes Chinese hacking firm's tools

ASD joins seven-nation alert as US seizes Chinese hacking firm's tools

Chinese govt-linked 'Flax Typhoon' hackers ran portal for stolen email access.
Juha Saarinen Oct 12 2026 12:32AM Security
NetScaler builds that fixed zero-days carry critical flaw, too

NetScaler builds that fixed zero-days carry critical flaw, too

Separate SAML flaw rated as 9.5 out of 10.0.
Juha Saarinen Oct 12 2026 12:29AM Security
Attackers hijack ccTLDs to fake certs for Google

Attackers hijack ccTLDs to fake certs for Google

Reported by Google Security.
Juha Saarinen Oct 8 2026 3:58PM Security
ClingSTUN botnet hijacks devices with years-old flaws

ClingSTUN botnet hijacks devices with years-old flaws

Linux malware exploits Ivanti gateway bugs ASD alerted on in 2024.
Juha Saarinen Oct 7 2026 6:45PM Security
Atlassian Data Centre products hit by unauthenticated file access vulnerability

Atlassian Data Centre products hit by unauthenticated file access vulnerability

Take internet-facing instances offline if they can't be patched immediately.
Juha Saarinen Oct 7 2026 6:48AM Security
Microsoft spots new twist on ClickFix "cache smuggling"

Microsoft spots new twist on ClickFix "cache smuggling"

Attackers now fish their malware out of the browser cache by file size alone.
Juha Saarinen Oct 6 2026 4:15AM Security
Cisco says no workaround for exploited SD-WAN Manager flaw

Cisco says no workaround for exploited SD-WAN Manager flaw

Attackers abuse easy authentication bypass in software.
Juha Saarinen Oct 1 2026 12:08PM Networking
Amaysim slugged with $138,600 penalty for unverified number ports

Amaysim slugged with $138,600 penalty for unverified number ports

Manual override of identity checks costs telco.
Juha Saarinen Sep 30 2026 8:58PM Telco/ISP
OpenAI agent accessed "credentials" via Medicare data portal

OpenAI agent accessed "credentials" via Medicare data portal

May explain government's alarm surrounding the incident.
Ry Crozier , Juha Saarinen Sep 29 2026 4:39PM Security
Citrix confirms exploitation of Netscaler zero-day bugs

Citrix confirms exploitation of Netscaler zero-day bugs

Updates issued.
Juha Saarinen Sep 28 2026 10:43AM Networking
Teen researcher with AI hackbot cracks Microsoft's Titan analytics

Teen researcher with AI hackbot cracks Microsoft's Titan analytics

Ten-day automated hunt stalled until "admin" login tried.
Juha Saarinen Sep 28 2026 6:20AM Security
Abandoned QR code subdomains open to hijacking, researcher says

Abandoned QR code subdomains open to hijacking, researcher says

'QR Jacking' easy and fast way to exploit a vulnerability in a trusted ecosystem.
Juha Saarinen Sep 25 2026 5:57PM Security
Ryuk ransomware raider sentenced to two years prison

Ryuk ransomware raider sentenced to two years prison

Armenian national pleaded guilty.
Juha Saarinen Sep 25 2026 5:05AM Security
New malware lets commercial AI models call the shots: Talos

New malware lets commercial AI models call the shots: Talos

Polls DeepSeek, Qwen, Gemini and Mistral AIs.
Juha Saarinen Sep 23 2026 9:38AM Security
Security researcher says don't install Meta's Muse AI assistant

Security researcher says don't install Meta's Muse AI assistant

Expert "not-a-mused" by insecure AI agent.
Juha Saarinen Sep 22 2026 12:52PM Security

Log In

  |  Forgot your password?