Meta’s Muse is more than a chatbot. It is a digital worker that can read email, make purchases across the web, and act after users close the app. Wall Street sees a return on Meta’s vast AI spending. Cybersecurity experts see a more urgent question: should it hold the keys to our digital lives yet?
Dell’s US$95 billion AI-server backlog and US$74 billion revenue outlook show the AI boom moving beyond a few cloud giants into enterprise, sovereign and neocloud infrastructure procurement.
Meta has come back to the consumer, and it has come back armed. Muse reads inboxes, drives a browser, books travel and pays. Meta has not led with intelligence. It has led with containment. A model that says the wrong thing is an embarrassment. An agent that does the wrong thing is now an incident.
The Victorian Department of Education has confirmed a major data breach affecting all 1700+ government schools. Hackers accessed the names, emails, and encrypted passwords of current and former students, impacting potentially hundreds of thousands of individuals just weeks before the new school year
Cyber News Centre's cyber update for 15th January 2026: The Victorian Department of Education has confirmed a major data breach impacting all 1700 of its government schools, with the personal information of current and former students accessed by an unauthorised third party.
Update: The Victorian Department of Education has disclosed that an unauthorised third party breached its systems, gaining access to a database containing the personal information of current and former students across all 1,700 government schools.
The incident, which reportedly occurred weeks ago but was announced yesterday, was initiated through a compromised school network. The exposed data includes student names, school-issued email addresses, year levels, and encrypted passwords. The department has confirmed that more sensitive information, such as dates of birth, home addresses, and phone numbers, was not compromised. In response, all student passwords have been reset as a precautionary measure, temporarily blocking access to school accounts. New credentials will be issued to senior VCE students as a priority, with all other students receiving them at the start of the 2026 school year.
The department is working with cybersecurity experts and other government agencies to investigate the incident and has disabled the attack vector to prevent further access. There is currently no evidence to suggest the stolen data has been publicly released or shared with other malicious actors. The timing of the disclosure is critical, coming just weeks before students are scheduled to return to classrooms.
Why it Matters: This breach represents a significant failure to protect the sensitive data of a large and vulnerable population. The exposure of student names and email addresses, even without more detailed personal information, creates a substantial risk of targeted phishing campaigns and other social engineering attacks against students, their families, and school staff.
The timing, just before the school year begins, maximises potential disruption and creates a logistical challenge for the department in securely re-issuing credentials for hundreds of thousands of students. The incident also erodes public trust in the government's ability to secure critical digital infrastructure, particularly within the education sector.
Get the stories that matter to you.
Subscribe to Cyber News Centre and update your preferences to follow our Daily 4min Cyber Update, Innovative AI Startups, The AI Diplomat series, or the main Cyber News Centre newsletter — featuring in-depth analysis on major cyber incidents, tech breakthroughs, global policy, and AI developments.
OpenAI's Astra can develop zero-day exploits, while a US$1 billion defence push seeks to give critical infrastructure teams the same machine-speed advantage.
US authorities have dismantled QTFY’s QScan and QTRouter platforms, exposing a China-linked service model that blended exploit trading, automated scanning and hijacked IoT devices to reach critical infrastructure while concealing where attacks began.
Australia’s cyber agency is warning that attackers are exploiting two N-able N-central authentication bypass flaws locally. For MSPs and enterprise IT teams, a trusted management console can become a route across hundreds of customer endpoints.
Taiwan confirmed AI agents ran a July government intrusion through weak credentials, not a zero-day. For Australian CISOs, last year's backlog has been repriced. Close hygiene, treat agents as privileged identities, and rehearse at machine speed before the next quarterly drill. The estate is open.
Where cybersecurity meets innovation, the CNC team delivers AI and tech breakthroughs for our digital future. We analyze incidents, data, and insights to keep you informed, secure, and ahead. Sign up for free!
