Effective December 10, 2025, social media providers are legally obligated to employ proactive measures to ensure Australian users under 16 are excluded from age-restricted platforms.

Australian telco Southern Phone has been fined with a record‑breaking $2.5 million fine after scammers exploited flaws in its systems for eight months, leaving customers exposed and losing their money.

The University of Sydney has confirmed a cybersecurity breach where unauthorised parties accessed and downloaded historical personal records of approximately 27,500 staff, students, and alumni from an internal IT code library primarily used for testing and software development.

A report from the NSW Auditor-General has revealed that Local Health Districts are failing to meet minimum cybersecurity standards, leaving sensitive patient data and critical clinical systems vulnerable due to inadequate incident response plans and a culture of non-compliance among staff.

New Zealand’s National Cyber Security Centre (NCSC) has begun contacting 26,000 citizens to warn them that their Windows devices have been infected with "Lumma Stealer," a sophisticated malware designed to harvest passwords and banking credentials for identity theft.