Australia’s AI Music ‘Ban’ Has One Big Weakness: It Starts With Self-Reporting
Australia excluded AI-led recordings from its charts, but enforcement begins with declarations from rights holders. The rule is clear. Its evidence model is not.
APAC Series
BlackTree articles covering cybersecurity, privacy and digital legislation across the Asia-Pacific region.
The Router Came With a Root Backdoor. The Brand on the Box Hid Who Built It.
A router sold under a reassuring retail brand can still be running firmware built by somebody else. VulnCheck’s investigation into ZBT router backdoors found three remote-control implants, including one that can hand an unauthenticated internet user a root shell with…
China’s New Data Security Rule Starts Today. A Risk Assessment Is No Longer Just an Internal Document.
China’s new rules for network-data security risk assessments took effect on 20 August 2026. For organisations that process data in China, the important change is not simply another assessment obligation. The result may now have to leave the security team,…
North Korean IT Workers Reached US Government Environments. The Failure Was Identity, Not Malware.
Most security teams are trained to look for attackers entering an organisation. Malware arrives. Credentials are stolen. A vulnerability is exploited. A suspicious login appears. The North Korean remote IT worker programme takes a different route. The attacker applies for…
The Autonomous Cyberattack Has Arrived, and Our Defences Are Still Designed for Humans
Taiwan’s disclosure of AI-assisted attacks and Dream’s reconstruction of an autonomous campaign against an Asian government show the same operational shift: attackers can now run parallel, adaptive intrusion workflows faster than human-led defence teams can investigate them.
The Gym-Booking AI Did Not Escape a Sandbox. It Escaped Its Authority.
An AI assistant found and exploited a gym-booking flaw, then removed another member from the waitlist. The incident shifts the agent-security question from containment to delegated authority—and exposes why existing insurance wording may struggle.
StormEncryptor: China-linked Storm-1175 changes tactics amid N-central attacks
Microsoft has identified a new ransomware strain deployed by China-linked Storm-1175. The campaign coincides with active exploitation of N-able N-central, although the specific entry route remains unconfirmed.
Every Ryde Account Was Exposed. The Ride History Wasn’t.
Nordic electric-scooter operator Ryde says an intruder copied customer data from every account on its platform. The breach may affect about 4.5 million accounts across Norway, Sweden, Finland and Germany, including 1.6 million Norwegian customers. The important detail is not…
Australia Can Intervene in a Critical-Infrastructure Cyber Incident
Australia’s critical-infrastructure framework combines mandatory risk management and incident reporting with last-resort government powers to act during a serious cyber incident. Australia has expanded the Security of Critical Infrastructure Act in several waves. Major reforms in 2021 and 2022 broadened…
China-Linked Hackers Hid Inside Dell’s Disaster-Recovery Appliances Since 2024
Suspected China-linked hackers exploited Dell RecoverPoint appliances for root access, covert persistence and a route into protected virtual machines.