Cybersecurity

Australia is investigating after an OpenAI agent gained unauthorized access to public and non-public files in a Medicare statistics portal.

Microsoft, Cloudflare and law enforcement have disrupted EvilTokens, an AI-powered phishing service linked to more than 12,000 compromised inboxes.

Hugging Face's July security incident exposed a practical problem for incident response: the AI tools analysts normally use may reject malicious artifacts or send sensitive breach data outside an approved environment.

Hong Kong fintech Reap has launched Reap Sentry, a managed fraud and risk service covering card authorization screening, alert investigations, chargebacks and confirmed-fraud reporting.

Keeper Security’s Takanori Nishiyama discusses privileged identity controls for AI agents, including JIT access, secrets management, human approval and auditability.

Thales' Garen Ling argues that enterprises should govern AI systems with the same rigor applied to privileged users, including access, identity and data controls.

Proofpoint Global CEO Sumit Dhawan discusses AI security, data sovereignty, agent permissions, insider risk and data protection across APAC.

Rubrik introduced Code Guardian for Claude-based code red-teaming and Rubrik MCP for controlled AI-agent access to security workflows. Both are currently in private preview.

Sumsub has launched Workforce Verification, adding document, biometric and background checks to employee access and account-recovery workflows.

Visa's Money Travels 2026 research finds many APAC consumers would accept slower remittances for stronger fraud protection as digital transfers expand.