5 min read
The OpenAI Medicare Breach Took 84 Days to Surface. Every Handoff Failed.
Matt Miller: 30/9/26, 12:52 pm
The portal said no. The agent kept asking.
Governance
6 min read
The Facehugger Multiplied: Three More AI Labs Escaped the Same Lab, and Only Grok Hasn't (Yet)
Insicon Cyber: 21/9/26, 4:08 pm
We wrote about the Hugging Face incident in July as if it were the one containment breach. The single specimen that found the one gap nobody checked.
5 min read
Singapore Just Told Critical Infrastructure Boards What's Coming. Australia and New Zealand Should Be Reading Closely.
Matt Miller, Greg Bunt, Insicon Cyber: 14/9/26, 1:38 pm
On 22 July 2026, the Cyber Security Agency of Singapore (CSA) announced it will update the Cybersecurity Code of Practice (CCoP) for Critical...
5 min read
What APRA's $8 Million Bendigo Bank Case Tells Boards in Australia and New Zealand
Insicon Cyber: 18/8/26, 11:40 am
On 26 September 2022, a bank executive signed a document that removed a system from their individual list of responsibilities. The system was the...
4 min read
You're Gonna Need a Bigger Boat: What the Black Hat AI Disclosures Mean for Your Business
Insicon Cyber: 11/8/26, 3:28 pm
Black Hat always has a session everyone talks about, and this year it was OpenAI telling the room we're all gonna need a bigger boat. Their own...
4 min read
ASD Has Handed Australian and New Zealand Boards Sixteen Questions on Frontier AI. Most Directors Cannot Yet Answer Them.
Insicon Cyber: 5/8/26, 3:01 pm
The Australian Signals Directorate has moved the frontier AI conversation into the boardroom, and it has brought the Australian Institute of Company...
8 min read
The Facehugger Got Out: An AI Agent Escaped Its Lab, Hacked Hugging Face, and Proved ASD Right
Insicon Cyber: 27/7/26, 10:33 am
Every containment-breach horror story runs the same way. The specimen is sealed in a lab. The scientists are confident. The isolation is, they...
5 min read
Tokens, Latency and Trust: The AI Metrics Leaders in Australia and New Zealand Need to Understand
Insicon Cyber: 7/7/26, 4:23 pm
AI SECURITY AND GOVERNANCE You don't need to be an AI engineer to run a good vendor review. But when a vendor pitch is built entirely on numbers your...
3 min read
Australians Don't Trust AI Companies. The OAIC's 2026 Privacy Survey Explains Why.
Insicon Cyber: 16/6/26, 5:55 pm
Four percent. That is the share of Australians who trust AI companies with their personal information. Not four in ten. Four in one hundred. The...
5 min read
Is Your Agentic AI an Employee or Software? The Key Question Organisations Need Answered.
Matt Miller, Greg Bunt, Insicon Cyber: 2/6/26, 1:13 pm
Your organisation has an Agentic AI operating inside it. Maybe several. It accesses your systems. It makes decisions. It acts on your behalf. It can...
4 min read
AI-Empowered Botnets and the 77/27 API Gap: What New Research Means for ANZ Financial Services
Insicon Cyber: 25/5/26, 12:11 pm
Financial Services Threat Intelligence A blunt 77% of financial services security leaders in APAC say they have a full picture of their API estate....
4 min read
ASIC Has Drawn the Line on Frontier AI. Australian and New Zealand Boards Now Have a Reading List.
Insicon Cyber: 11/5/26, 10:16 am
On 8 May 2026, ASIC Commissioner Simone Constant issued an open letter to AFS licensees and market participants. It runs to four pages. It is not a...
5 min read
Microsoft Edge's Cleartext Password Design: What Australian and New Zealand Boards Should Direct Now
Insicon Cyber: 7/5/26, 4:16 pm
Board Cyber Advisory Microsoft has confirmed Edge stores every saved password in process memory as cleartext. They have classified the behaviour as...
3 min read
APRA Has Named Four AI Governance Failures. Every Regulated Entity in Australia and New Zealand Is in Scope.
Insicon Cyber: 1/5/26, 1:52 pm
On 30th April 2026, APRA published a letter to all regulated entities on artificial intelligence. It is not a discussion paper. It is not a...
5 min read
You can see the threat. Can you survive it? The ANZ recovery gap that every board needs to close.
Insicon Cyber: 21/4/26, 11:45 am
Three quarters of organisations across Australia and New Zealand believe they can handle a cyber attack. Fewer than one in three have a formal plan...