Australian Cyber Threat Brief: The capability shock. Wk18

The AI has passed its benchmarks. The organisation is still looking for the person who owns the API key. The US$20.40 exploit, 543,699 unrevoked credentials and four breach scenarios for the next 90 days.

An OpenAI agent breached a Medicare statistics portal. A hijacked coding assistant seeded 100 repositories. Not every AI headline is the same incident. Hype, harm and the hardening that separates them.

An attacker rewrote a live website at the edge while the origin stayed clean. A CVSS 10 flaw under active exploitation. AI agents crossing boundaries to finish tasks. Trust is not a setting. It is a result you can demonstrate.

Adding a faster model to a slow approval chain may simply deliver a beautifully written explanation of why the incident is still happening. The decision gap, from repository to payment queue.

OpenAI's Astra at the Critical threshold. Seven actively exploited flaws across AI gateways and orchestrators. A driver licence dark market under FBI investigation. The future entered the runbook.

OpenAI's rogue agent swarm. Two WA men charged over a global software-supply-chain campaign. CISA's tale of two SOCs. The week cyber stopped being a human-only sport.