Australia’s cyber agency is warning that attackers are exploiting two N-able N-central authentication bypass flaws locally. For MSPs and enterprise IT teams, a trusted management console can become a route across hundreds of customer endpoints.
A month after the Hugging Face breach, new details reveal AI agents coordinated, rebuilt deleted infrastructure and escalated access in hours. The fallout is now reaching Congress, regulators and frontier labs, raising urgent questions about AI security and control.
A Zhuhai operator used DeepSeek, a Hermes agent and a godmode jailbreak to hunt 460-plus targets. Open-weight models made the offensive kit a shopping list.
Sydney-based fintech youX has confirmed a massive data breach exposing the personal and financial details of 444,538 Australian borrowers. An unsecured database left 141GB of data, including loan applications, driver's licences, and residential addresses, accessible for at least 10 months.
Cyber News Centre's cyber update for 19th February 2026: Sydney-based fintech platform youX has confirmed a catastrophic data breach, exposing the highly sensitive personal and financial information of 444,538 Australian borrowers.
youX is a Sydney-based asset finance technology company that provides a platform for thousands of finance brokers and over 90 lenders, including major Australian banks. The platform is used to manage, assess, and submit loan applications, connecting borrowers with a wide network of financial institutions.
Update: Sydney-based fintech youX has confirmed a massive data breach after a threat actor gained unauthorised access to an unsecured MongoDB Atlas cluster, exfiltrating 141GB of highly sensitive data.
The breach, which the company became aware of last week, impacts 444,538 unique Australian borrowers, with the compromised database reportedly left exposed for at least 10 months. The stolen data includes the personal and financial details of borrowers, such as income, debts, government IDs, and home addresses.
The hacker claims to have obtained 629,597 loan applications, 229,236 Australian driver's licences, and 607,822 residential addresses. The threat actor has released a preview of the data, including $3.7 billion in loan applications, and is threatening to release the full dataset in stages if a ransom is not paid. youX has notified the Office of the Australian Information Commissioner (OAIC) and is in the process of notifying affected individuals.
The company has engaged external cybersecurity experts to investigate the incident and has implemented additional security controls and enhanced monitoring across its systems. The breach also affects 797 broker organisations and over 90 downstream lenders.
Why it Matters: This breach represents a significant threat to the financial security of hundreds of thousands of Australians. The sheer volume and sensitivity of the stolen data—including driver's licences, financial details, and personal identifiers—create a perfect storm for widespread identity theft, sophisticated phishing attacks, and financial fraud.
The exposure of data from over 90 lenders, including major banks, highlights the systemic risk inherent in the interconnected financial ecosystem. For the 797 affected broker organisations, the breach is a major blow to client trust and operational integrity. The incident serves as a stark reminder of the critical importance of securing third-party platforms and the devastating consequences of long-term data exposure.
Get the stories that matter to you.
Subscribe to Cyber News Centre and update your preferences to follow our Daily 4min Cyber Update, Innovative AI Startups, The AI Diplomat series, or the main Cyber News Centre newsletter — featuring in-depth analysis on major cyber incidents, tech breakthroughs, global policy, and AI developments.
Australia’s cyber agency is warning that attackers are exploiting two N-able N-central authentication bypass flaws locally. For MSPs and enterprise IT teams, a trusted management console can become a route across hundreds of customer endpoints.
A record close on Wall Street and the AI names that were meant to lead it taken apart in the same session. Beijing is now drafting export controls on its own models. The labs keep finding their systems outside the box. Read one at a time, it is a normal week. Read together, something else entirely.
As artificial intelligence automates both attack and defence, the window to patch critical vulnerabilities is vanishing. Black Hat 2026 research confirms autonomous systems are discovering thousands of previously unreported flaws.
Critical infrastructure operators face a reckoning as malicious cyber actors target water utilities across the United States. Federal authorities warn of escalating threats against operational technology.
Where cybersecurity meets innovation, the CNC team delivers AI and tech breakthroughs for our digital future. We analyze incidents, data, and insights to keep you informed, secure, and ahead. Sign up for free!
