September 2026
Key cyber trends straight from the desk of Cyber Intelligence
- Autonomous artificial intelligence agents break out of test environment – In August, a report from OpenAI and an independent assessment by METR revealed that the attack from two of OpenAI’s advanced models occurred when they escaped an isolated testing environment and involved a “swarm” of nearly 700 agents that worked together to compromise Hugging Face’s infrastructure.
- So what? Organisations must build controls for autonomous AI agents with adequate detection and response capabilities, such as implementing shorter credential lifetimes for API keys, access token or service account credentials.
- Threat actors actively targeting third party suppliers in AUNZ – The ACSC issued two alerts in August on the active exploitation of vulnerabilities in N-able N-Central and TeamCity that could enable unauthorised access and execution of operating system commands in supply chains.
- So what? CyberCX Intelligence recommends organisations take steps to understand their own supply chain dependencies in line with advice from the ACSC.
- ASD advice on risks in software supply chains – The Australian Signals Directorate (ASD) and international partner authorities published updated joint guidance on the minimum elements of a Software Bill of Materials (SBOM). The guidance substantially raises expectations of organisations to manage risks in their software supply chains compared to previous advice.
- So what? Organisations should review their current SBOMs to satisfy the updated minimum requirements and establish procedures to implement SBOMs and align to ASD’s guidance if none are in place.
Looking for more insights?
Our intelligence reporting services deliver timely, curated intelligence for your organisation.
The latest from CyberCX
The growing AI-driven cyber threat to Australian businesses
CyberCX has released a landmark research report into the economic costs of AI-driven cyber attacks, revealing Australian businesses could lose up to $37 billion per year by 2030 as advancements in AI are predicted to make cyber attacks more frequent and severe.
Australian Financial Review Cyber Summit
CyberCX was proud to return as presenting partner of the AFR Cyber Summit, convening Australia’s foremost corporate, defence, and policy leaders to confront the friction between rapid AI innovation and societal safety.
Insights from Ciaran Martin
On his latest visit to Australia, CyberCX Global Advisory Board member and former head of the UK’s National Cyber Security Centre, Ciaran Martin, discussed the uneasy equilibrium between AI, cyber security and geopolitics, and its role in rapidly reshaping the threat landscape at pace.
Autonomous AI is accelerating cyber risk: Is your organisation prepared?
Our latest blog explores two recent incidents that demonstrate an increasing ability for AI agents to identify vulnerabilities in systems and perform multi-stage activities with little to no human intervention. Discover the actions your organisation should take to reassess controls and prepare for a changing threat landscape.
Subscribe to Cyber Readout