Vocus Obtains Three Federal Government Contracts

Nicholas Kinports on October 26, 2025


We independently review everything we recommend. When you buy through our links, we may earn a commission which is paid directly to our Australia-based writers, editors, and support staff. Thank you for your support!

Vocus Wins Federal Government Contracts

Quick Overview

  • Vocus has been awarded three federal government contracts, with a combined value of around $6 million over a three-year period.
  • Contracts are associated with the Digital Transformation Agency (DTA), Department of Foreign Affairs and Trade (DFAT), and Australian Criminal Intelligence Commission (ACIC).
  • The DTA agreement includes significant upgrades to infrastructure for enhanced security and control of network traffic.
  • New contracts have been established with DFAT and ACIC, not just renewals.
  • Vocus is broadening its network presence following the acquisition of assets from TPG Telecom.
Vocus secures government contracts for internet services

Vocus Expands Government Portfolio

The Australian federal government has entrusted Vocus with three critical telecommunications contracts, totaling approximately $6 million over the next three years. This strategic initiative involves collaborations with the Digital Transformation Agency (DTA), the Department of Foreign Affairs and Trade (DFAT), and the Australian Criminal Intelligence Commission (ACIC), aimed at delivering reliable internet services to these agencies.

Upgrades for Improved Security

The updated agreement with the DTA, valued at $707,000, includes a noteworthy infrastructure upgrade. DTA’s Chief Operating Officer, Tom Gilmartin, noted that Vocus will enhance the agency’s network equipment, strengthening network traffic management and boosting security protocols. This upgrade is scheduled to commence in November, representing a vital advancement in the DTA’s digital infrastructure.

New Partnerships with DFAT and ACIC

Vocus’s contract with DFAT, worth $2.7 million, marks a fresh engagement as opposed to a renewal of previous contracts. A spokesperson from DFAT confirmed that this contract covers the delivery of internet and carriage services to local facilities, focusing on infrastructure and bandwidth improvements.

Likewise, the $2.3 million arrangement with ACIC is a new contract as well. Although specific details remain confidential due to agency guidelines, this agreement signifies a noteworthy expansion of Vocus’s involvement across federal bodies.

Strategic Growth and Market Influence

In January 2024, the Department of Home Affairs (DHA) divided its telecommunications services between Optus and Vocus, establishing Vocus as the new contractor for internet and data carriage. This change disrupted Optus’s long-held supremacy in delivering network services to DHA.

Furthermore, Vocus is undergoing a considerable expansion by integrating infrastructure from its $5.25 billion acquisition of TPG Telecom’s enterprise, government, wholesale fixed-line, and fibre resources. The final governmental approvals obtained in July have permitted Vocus to advance with this ambitious growth plan, further enhancing its footprint in the Australian telecommunications market.

Conclusion

Vocus’s recent acquisition of three federal government contracts highlights its strategic growth within the Australian telecommunications industry. With significant investments in infrastructure improvements and new agency collaborations, Vocus is well-positioned to provide enhanced internet services to essential government entities, signifying a significant transformation in the competitive environment.

Q: What are the new contracts Vocus has obtained?

A: Vocus has obtained contracts with the Digital Transformation Agency (DTA), the Department of Foreign Affairs and Trade (DFAT), and the Australian Criminal Intelligence Commission (ACIC).

Q: What does the DTA contract involve?

A: The DTA’s contract encompasses a $707,000 arrangement for internet services, including a network appliance upgrade for better traffic control and security, set to begin in November.

Q: Are the contracts with DFAT and ACIC new or renewals?

A: Both the DFAT and ACIC contracts are new agreements instead of extensions of existing contracts.

Q: How is Vocus extending its network presence?

A: Vocus is extending by incorporating infrastructure from its $5.25 billion acquisition of TPG Telecom’s assets, improving its capabilities across enterprise, government, wholesale fixed-line, and fibre services.

Telstra Releases Samsung Firmware to Direct Triple-0 Calls through Vodafone Network

Nicholas Webb on October 26, 2025


We independently review everything we recommend. When you buy through our links, we may earn a commission which is paid directly to our Australia-based writers, editors, and support staff. Thank you for your support!

Telstra Unlocks Samsung Firmware for Emergency Triple-0 Calls

Quick Overview

  • Firmware problems in 70 Samsung handsets hinder proper routing of emergency Triple-0 calls.
  • Telstra attributes the issue to Vodafone’s 3G network setup.
  • Australian telecom operators are urged to enhance emergency call processing.
  • ACMA enforces more stringent regulations for device testing and network oversight.
  • Customers are allotted 28 days to either update software or swap out affected devices.
Telstra's Samsung firmware challenge impacting Triple-0 calls

Telstra’s Identification of Firmware Problems

Telstra has identified a significant firmware issue affecting roughly 70 older models of Samsung mobile phones. These devices fail to correctly route emergency Triple-0 calls because their firmware relies solely on Vodafone’s discontinued 3G network. Testing by Telstra revealed that the affected handsets do not connect to the Vodafone network when both Telstra’s and Optus’ networks are down.

Effects on Emergency Call Processing

This discovery arises amidst heightened scrutiny regarding the management of Triple-0 calls by Australian carriers, following a failure of emergency services connected to three deaths. This situation has triggered a blame exchange among carriers, with Telstra attributing the complications to both Vodafone’s network and the configurations of Samsung’s devices.

Reactions from Telecom Providers and Regulators

TPG Telecom, speaking for Vodafone, has claimed that the problem originates from limitations in device configuration rather than any fault with the Vodafone network itself. In light of warnings sent through electronic communications, carriers like Optus and TPG have ramped up their alerts as the sunset of the 3G network loomed. Optus has actively engaged with customers regarding possible connectivity challenges, including launching a six-week multilingual awareness campaign.

New Regulatory Initiatives

The Australian Communications and Media Authority (ACMA) has responded by declaring stricter regulations for evaluating mobile devices’ emergency call functionalities. These regulations encompass improved scrutiny of network equipment and criteria for the “camp-on” process, which facilitates handsets switching networks during emergencies.

Advisory for Customers

Both Telstra and Optus have provided impacted customers with a 28-day period to either update their device software or replace their handsets. Those who do not comply will face their devices being barred from all Australian mobile networks.

Recap

The identification of a firmware problem in older Samsung handsets by Telstra has highlighted substantial difficulties in regulating emergency call routing across Australia. As telecom operators and regulators strive to rectify these concerns, customers with affected devices must take action to ensure their access to emergency services remains intact.

Q: What is the primary problem with the Samsung devices?

A: The main problem is that the firmware on these devices is set to route Triple-0 calls solely through Vodafone’s obsolete 3G network, preventing calls from being placed when other networks aren’t available.

Q: How are telecom providers addressing this issue?

A: Providers such as Telstra and Optus are urging customers to update or replace the impacted devices within a 28-day timeframe to avoid being cut off from network services.

Q: What measures is ACMA putting into place?

A: ACMA is enacting stricter guidelines for testing devices, concentrating on emergency call functionality and network surveillance to avert similar issues going forward.

Q: How have telecom providers informed customers of this issue?

A: Telecom providers have utilized electronic notifications, including emails and SMS, to inform customers about the issue. Optus also initiated an extensive marketing campaign to connect with various communities.

Q: What actions should customers with affected devices take?

A: Customers are advised to either update their device software or completely switch out their handsets to guarantee they can make emergency calls and utilize other mobile services.

ACMA Rejects Proposed Consumer Code as Demands for an End to Self-Regulation Increase

Nicholas Webb on October 25, 2025


We independently review everything we recommend. When you buy through our links, we may earn a commission which is paid directly to our Australia-based writers, editors, and support staff. Thank you for your support!

ACMA Rejects Proposed Consumer Code as Demand for Regulatory Action Grows

ACMA Rejects Proposed Consumer Code as Demand for Regulatory Action Grows

ACMA rejects proposed consumer code as pressures to conclude self-regulation intensify

Quick Summary

  • ACMA has turned down the most recent draft of the telecommunications consumer protections code.
  • Industry provided 30 days to present a revised code or risk regulatory measures.
  • Concerns encompass irresponsible selling practices and insufficient consumer protections.
  • Demand for ACMA to utilize legislative powers to regulate the industry directly has increased.

ACMA’s Position on Consumer Protections

The Australian Communications and Media Authority (ACMA) has rejected the latest draft of consumer protection proposals from the telecommunications sector. The regulator insists on a reworked set of protections within 30 days or faces imposing regulatory rules that would end the industry’s self-regulation.

Industry’s Reaction and Consultation Process

The Australian Telecommunications Association (ATA), which represents industry carriers, expressed dissatisfaction alongside ACMA regarding the outcome of the consultation process. ATA chief executive Luke Coleman mentioned that the draft went through multiple consultation phases since May 2023, intending to improve consumer protections.

Primary Concerns and Consumer Advocacy

ACMA raised issues like irresponsible sales practices, insufficient credit evaluations, and unfair disconnection policies. The Telecommunications Industry Ombudsman (TIO) and the Australian Communications Consumer Action Network (ACCAN) have also expressed worries, calling for clear guidelines to curb unethical sales and prevent wrongful disconnections.

Demand for Regulatory Action

With trust decreasing in the industry’s capacity for self-regulation, ACCAN CEO Carol Bennett urged ACMA to leverage its legislative authority for direct regulation. The persistent delays in establishing effective consumer protections have made immediate action necessary to protect consumer interests.

Conclusion

As ACMA rejects the most recent draft consumer code, the future of telecommunications regulation in Australia stands at a crucial crossroads. With just 30 days to respond, the industry must tackle pressing consumer protection issues or encounter regulatory intervention. The demand for ending self-regulation intensifies as stakeholders call for substantial protections for Australian consumers.

Q&A

Q: What led ACMA to dismiss the draft consumer code?

A: ACMA deemed the draft inadequate in addressing significant consumer protection concerns and failing to meet anticipated standards.

Q: What are the primary issues raised by ACMA?

A: ACMA identified irresponsible sales tactics, insufficient consumer awareness, and unjust disconnection policies.

Q: What is the industry’s deadline for response?

A: The telecommunications industry has been allotted 30 days to submit a revised proposal.

Q: What role does ACCAN play in this matter?

A: ACCAN advocates for stronger regulatory actions and has urged ACMA to directly regulate the industry.

Q: How does this impact consumers?

A: Consumers could gain from stronger protections and fairer practices if the issues are adequately addressed.

Q: What could happen if the industry fails to present an acceptable code?

A: ACMA might enforce regulatory measures, terminating the existing self-regulation framework.

AWS Outage Caused by Uncommon Automated Systems Interaction

Nicholas Kinports on October 25, 2025


We independently review everything we recommend. When you buy through our links, we may earn a commission which is paid directly to our Australia-based writers, editors, and support staff. Thank you for your support!

Quick Read

  • AWS encountered a significant outage in North Virginia due to an uncommon software malfunction.
  • The outage resulted from a dormant race condition within the DynamoDB DNS management framework.
  • This malfunction stemmed from an improbable interaction between automated elements.
  • Human intervention was required to rectify the problem.
  • AWS has globally suspended specific automated systems temporarily.
  • The incident impacted various AWS services reliant on DynamoDB.

AWS Outage Examination

The recent outage of Amazon Web Services (AWS) in North Virginia has been linked to a software defect within an automated DNS management framework. This defect resulted in an unexpected interaction where one automated element unintentionally eliminated the work of another.

AWS outage caused by unlikely DNS interaction

Comprehending the Primary Cause

AWS has indicated in a report following the incident that the outage stemmed from a “latent race condition” in the DynamoDB DNS management system. This resulted in an incorrect empty DNS record for the service’s regional endpoint, which automation failed to rectify.

The Function of DNS Planner and Enactors

The DNS management system consists of two essential components: the DNS Planner and DNS Enactors. The Planner formulates new DNS strategies, while the Enactors implement these strategies at endpoints. Usually, these components function smoothly to ensure DNS states are current.

Chain Reaction of Events

During this event, one DNS Enactor experienced unusual delays, necessitating several attempts to refresh DNS endpoints. At the same time, another Enactor executed a more recent plan, instigating the race condition. The delayed Enactor overwrote the recent plan, leading to the removal of IP addresses for the endpoint.

Manual Intervention and Preventative Steps

Ultimately, human intervention was crucial to address the issue. AWS has disabled both the DNS Planner and DNS Enactors on a worldwide basis. Prior to re-enabling these systems, AWS intends to correct the race condition and introduce additional measures to avert future issues.

Impact on Dependent Services

The outage in the US-EAST-1 region affected other AWS services dependent on DynamoDB, including EC2 instances. These disruptions occurred because subsystems became unable to connect to the service, resulting in cascading effects throughout the AWS ecosystem.

Synopsis

The AWS outage in North Virginia highlights the intricacies of automated cloud management systems and their potential weaknesses. AWS is actively working to address the problems and avoid similar incidents in the future. This event serves as a reminder of the significance of robust system architecture and the necessity for human oversight in critical scenarios.

Q&A

Q: What led to the AWS outage in North Virginia?

A: The outage was triggered by an uncommon software defect involving a dormant race condition in the DynamoDB DNS management system.

Q: How did the race condition impact AWS services?

A: It resulted in the deletion of DNS records for a regional endpoint, affecting multiple AWS services that rely on DynamoDB.

Q: What measures is AWS implementing to prevent future outages?

A: AWS has suspended certain automated systems globally and plans to rectify the race condition while establishing safeguards against erroneous DNS plans.

Q: Was human intervention needed during the outage?

A: Indeed, manual operator intervention was essential to alleviate the situation and restore services.

Q: What additional AWS services were impacted by the outage?

A: EC2 instances and other services reliant on DynamoDB experienced disruptions during the occurrence.

Australia Poised to Sign UN ‘Surveillance Agreement’ in Vietnam

Matthew Miller on October 24, 2025


We independently review everything we recommend. When you buy through our links, we may earn a commission which is paid directly to our Australia-based writers, editors, and support staff. Thank you for your support!

Australia to Endorse UN Cybercrime Agreement

Quick Overview

  • Australia ready to endorse a UN cybercrime agreement in Vietnam.
  • The agreement focuses on addressing cybercrime through global collaboration.
  • Opponents warn it may compromise privacy and security.
  • Fears about sweeping definitions and possible abuse of the agreement.
  • Human rights advocates urge for a more limited focus of the agreement.

Australia’s Step Towards a UN Cybercrime Agreement

Australia is about to endorse a new United Nations convention aimed at fighting cybercrime. This important event will occur in Ha Noi, Vietnam, during a prominent ceremony. The agreement, spearheaded by the UN Office on Drugs and Crime (UNODC), aims to strengthen global cooperation and knowledge sharing to combat various online crimes.

Australia to endorse UN cybercrime agreement in Vietnam

Issues and Opposition

The agreement, first introduced by Russia in 2017, has garnered significant backlash from leading technology firms such as Oracle, Meta, and Microsoft, along with human rights groups. These entities, represented by the Cybersecurity Tech Accord, contend that the agreement could result in an extensive surveillance system that threatens digital privacy and safeguarding.

Major apprehensions include transnational data sharing that lacks legal oversight and ambiguous definitions of cybercrime, which might blur the line between cybercrime and any ICT-related infraction.

Human Rights Considerations

There are concerns that the treaty’s expansive definitions may limit freedom of speech. Vietnam, the nation hosting the event, has faced scrutiny for prosecuting online activists, raising alarm over the possible exploitation of the treaty. Furthermore, cybersecurity experts could lack protection, and minors might be penalised for specific online conduct.

Terms and Protections

The UNODC assures that the agreement includes safeguards for human rights, permitting countries to decline cooperation requests that conflict with international law. It also promotes legitimate cybersecurity research. Nevertheless, groups such as the Electronic Frontiers Foundation advocate for a more focused scope and transparency measures, ensuring people are informed when their data is transferred across borders.

Australia’s Pledge

Australia’s Department of Foreign Affairs and Trade (DFAT) has shown backing, indicating that the agreement will enhance international legal cooperation and evidence sharing for serious cyber crimes. While Australia is set to endorse, ratification will require approval from the government. Australia has been part of the Budapest Convention on Cybercrime since 2013.

Conclusion

Australia’s forthcoming endorsement of the UN cybercrime agreement represents a pivotal step in global efforts to address cyber threats. However, the treaty’s extensive scope and potential repercussions for privacy and security have prompted considerable discussion and concern. As dialogues continue, achieving a balance between effective cybercrime prevention and the protection of human rights is crucial.

Question & Answer

Q: What is the primary objective of the UN cybercrime agreement?

A: The agreement seeks to combat cybercrime through enhanced international collaboration and information sharing.

Q: Who are the principal critics of the agreement?

A: Major technology companies and human rights organisations, including the Cybersecurity Tech Accord, are the main critics.

Q: What are the central issues raised by critics?

A: Critics are apprehensive about broad cybercrime definitions, possible infringements on privacy, and the jeopardisation of digital security.

Q: How does the agreement tackle human rights concerns?

A: The UNODC claims that the agreement includes measures to protect human rights and permits nations to deny requests that conflict with international law.

Q: Is Australia affiliated with any other cybercrime treaties?

A: Yes, Australia has been a signatory to the Budapest Convention on Cybercrime since 2013.

Q: What actions must Australia undertake after endorsing the agreement?

A: Following the endorsement, Australia will require governmental approval to officially ratify the agreement.

Optus Names Ex-NBN Co CIO as Fresh Technology Head

wpengine on October 23, 2025


We independently review everything we recommend. When you buy through our links, we may earn a commission which is paid directly to our Australia-based writers, editors, and support staff. Thank you for your support!

Optus Welcomes New Technology Leader

Quick Overview

  • John McInerney, ex-CIO of NBN Co, has been designated as Optus’ new technology leader.
  • Mark Potter will depart from Optus in March after laying a solid technological groundwork.
  • The changeover includes a four-month overlap period for a seamless leadership transition.
  • McInerney’s skills in digital transformation are anticipated to propel the IT evolution at Optus.
  • This marks Optus’ second significant leadership change within a three-month timeframe.
  • Recent difficulties for Optus comprise a flawed firewall upgrade connected to failures in emergency calls.

Leadership Transition at Optus

Optus has declared a notable leadership transition with John McInerney taking over as the new chief information officer (CIO), replacing Mark Potter who is set to exit the company by March of the following year. This shift is part of a scheduled leadership change that Optus believes will enhance its technological progress.

Optus appoints ex-NBN Co CIO to lead technology

Background of John McInerney

John McInerney, who is presently the CIO at OneNZ, is widely recognized for his seven-year role as the group CIO at NBN Co. He also has considerable experience from Telstra, where he served in senior IT leadership capacities for eight years. His appointment is expected to infuse Optus with significant expertise in digital transformation and operational resilience, vital for the company’s ongoing transformation efforts.

Strategic Effects for Optus

Optus CEO Stephen Rue has expressed assurance in McInerney’s capability to lead multifaceted transformation initiatives. This strategic placement aims to refine Optus’ IT skills, in line with their objective of simplifying products, procedures, data, and systems. The leadership transition will feature a four-month overlap to facilitate a seamless handover.

Recent Issues Encountered by Optus

Optus has been facing a series of challenges, including a heavily criticized firewall upgrade that caused emergency call failures associated with at least three deaths. This event highlights the necessity for strong IT leadership, which McInerney is expected to deliver.

Conclusion

The elevation of John McInerney as Optus’ new technology leader signifies a crucial turning point for the company as it pursues its technological upheaval. With his extensive background, McInerney is positioned to implement substantial improvements in Optus’ IT functions, aimed at enhancing customer service and operational productivity.

Q: Who is taking over from Mark Potter as Optus’ CIO?

A: John McInerney, prior CIO of NBN Co, will replace Mark Potter as Optus’ new chief information officer.

Q: What is John McInerney’s professional history?

A: John McInerney served as group CIO at NBN Co for seven years and held senior IT positions at Telstra for eight years. He is currently the CIO at OneNZ.

Q: What issues has Optus experienced lately?

A: Optus has faced backlash for a firewall upgrade that resulted in emergency call failures, emphasizing the need for capable IT leadership.

Q: How does Optus intend to oversee the leadership transition?

A: A four-month transition phase will be in place, allowing McInerney to work alongside outgoing CIO Mark Potter to ensure a smooth transfer of responsibilities.

Q: What skills does John McInerney offer to Optus?

A: McInerney is recognized for his proficiency in digital transformation and operational resilience, which will be essential as Optus streamlines its IT frameworks.

Q: When will John McInerney officially join Optus?

A: John McInerney is slated to join Optus next month, initiating the start of the transition phase.

Queensland Government Eliminates CISO Position

Vanessa May on October 23, 2025


We independently review everything we recommend. When you buy through our links, we may earn a commission which is paid directly to our Australia-based writers, editors, and support staff. Thank you for your support!

Update on Cyber Security Role in Queensland Government

Quick Overview

  • The CISO position in the Queensland government has been rebranded to general manager, cyber security.
  • Adam Smith is currently the acting general manager, cyber security.
  • This modification is in line with departmental title standardization.
  • The position continues to report to the Deputy Director-General, Data and Digital Government.
  • A $1 billion investment has been announced by the government to improve governmental systems.

Rebranding the Role: A Strategic Decision

The Queensland government has embarked on a strategic rebranding of its chief information security officer (CISO) role, selecting the title of general manager, cyber security. This transformation follows an extensive search for a qualified candidate to fill the role and fits into a wider departmental initiative to harmonize role titles.

Interim Management and Hiring Process

In June, Adam Smith, who was the deputy CISO, took over as the interim whole-of-government CISO after Rob Champion’s retirement. Smith will hold this role until a permanent candidate is chosen. The newly designated position of general manager, cyber security is presently listed on Queensland’s Smart Jobs website.

Consistency in Duties

Even though the title has changed, the duties linked to the CISO role remain unchanged. The general manager, cyber security will keep reporting to the Deputy Director-General, Data and Digital Government, assuring leadership continuity and strategic direction.

Major Investment in Digital Technology

Simultaneously with this leadership change, the Queensland government has revealed a significant $1 billion investment aimed at enhancing its whole-of-government systems. This initiative seeks to consolidate systems and funding across 19 departments, demonstrating a strong pledge to modernizing and securing governmental functions.

QLD government retires CISO position title

Conclusion

The choice made by the Queensland government to change its CISO title to general manager, cyber security signifies an adaptation to departmental naming practices and a dedication to preserving strong leadership in cyber security. The ongoing $1 billion investment in digital infrastructure further emphasizes the state’s commitment to advancing and securing its governmental processes.

Q&A Section

Q: Why was the CISO title changed to general manager, cyber security?

A:

The renaming is consistent with the titles used throughout the department and represents a strategic effort to unify and standardize government roles.

Q: Who is presently heading the cyber security initiatives in Queensland?

A:

Adam Smith is acting as the interim general manager, cyber security until a permanent successor is appointed.

Q: What effect will the $1 billion investment have on the systems of Queensland’s government?

A:

The funding aims to upgrade and integrate systems across 19 departments, enhancing efficiency, security, and technological advancements.

Q: Will the CISO’s responsibilities change with the new title?

A:

No, the duties will remain consistent, and the position will still report to the Deputy Director-General, Data and Digital Government.

Q: How does this rebranding impact the overall cyber security strategy?

A:

The rebranding forms part of a larger initiative to standardize roles and titles, ensuring clarity and uniformity in the government’s cyber security approach.

“Malicious ‘Glassworm’ Malware Distributes Through Compromised VS Code Extensions”

Vanessa May on October 22, 2025


We independently review everything we recommend. When you buy through our links, we may earn a commission which is paid directly to our Australia-based writers, editors, and support staff. Thank you for your support!

Glassworm Malware Intrusion on VS Code Plugins

Brief Overview

  • Glassworm malware has compromised a number of VS Code plugins.
  • The infection employs invisible Unicode characters to avoid detection.
  • More than 10,700 downloads compromised on the OpenVSX marketplace.
  • Malware functions via the Solana blockchain for command and control.
  • Attackers exploit alternative channels such as Google Calendar.
  • Ongoing threat with existing infrastructure and payload server.
  • Developers urged to review plugins and update credentials.

Grasping the Glassworm Malware Intrusion

Concealed malware intrusion on VS Code plugins

The Glassworm malware has surfaced as a considerable risk, targeting Microsoft Visual Studio Code plugins. Identified by Koi Security, this advanced worm utilizes invisible Unicode characters to embed harmful code, eluding both human oversight and detection tools. As of October 17, it had penetrated seven plugins on the OpenVSX marketplace, resulting in over 10,700 downloads.

How Glassworm Avoids Detection

By employing Unicode variation selectors, Glassworm’s code stays hidden from static scanners and human reviewers, resulting in developers unknowingly disseminating the malware. This stealthy method has outmaneuvered even GitHub’s diff view and syntax highlighting features.

Communication Using Blockchain

Glassworm utilizes the Solana blockchain for its command and control (C2) setup. It interprets base64-encoded data in blockchain memos to discover new payloads. The unchangeable nature of blockchain transactions creates an “unkillable infrastructure,” permitting attackers to refresh commands without concern of being removed.

Backup Channels and Payload Distribution

In addition to blockchain, Glassworm employs direct IP addresses and Google Calendar events as secondary channels. Malware traffic masquerading as legitimate Calendar events circumvents conventional security protocols. The Solana-connected server delivers an AES-encrypted payload, with decryption keys transmitted via HTTP headers, complicating interception efforts.

Propagation and Secondary Component: ZOMBI

The worm actively pursues credentials from npm, GitHub, OpenVSX, and cryptocurrency wallets to extend its reach. Glassworm’s secondary component, ZOMBI, transforms infected systems into proxy nodes, utilizing SOCKS proxies and WebRTC to evade firewalls. It also employs HVNC for discreet remote desktop access.

Ongoing Threat and Suggestions

Koi Security confirms that Glassworm’s infrastructure is still active, with operational payload servers and continuous data exfiltration. Developers are recommended to scrutinize their plugins and change any compromised credentials. Affected plugins include CodeJoy, l-igh-t.vscode-theme-seti-folder, among others.

Conclusion

The Glassworm malware intrusion underscores vulnerabilities within software supply chains, taking advantage of the invisibility of Unicode characters to conceal its existence. With an indestructible command infrastructure and advanced evasion tactics, Glassworm continues to pose a significant threat to developers globally.

Q&A

Q: What is Glassworm malware?

A: Glassworm is a malware worm that targets Microsoft Visual Studio Code plugins, using invisible Unicode characters to avoid detection.

Q: In what way does Glassworm evade detection?

A: It employs Unicode variation selectors to render its code invisible to both static scanning tools and human evaluators.

Q: What renders Glassworm’s command infrastructure unkillable?

A: It functions through the Solana blockchain, which is immutable, enabling it to modify commands without the risk of being terminated.

Q: How are developers impacted by Glassworm?

A: Developers unknowingly propagate malware through compromised plugins, resulting in potential data breaches and internal system compromises.

Q: What steps can developers take to safeguard themselves?

A: Developers should review their installed plugins, refresh exposed credentials, and stay alert against such intricate attacks.

Q: Is the threat from Glassworm still ongoing?

A: Yes, the infrastructure remains active, with operational payload servers and ongoing data collection efforts.

Federal Court Moves CourtPath to Microsoft Azure Cloud

Nicholas Kinports on October 22, 2025


We independently review everything we recommend. When you buy through our links, we may earn a commission which is paid directly to our Australia-based writers, editors, and support staff. Thank you for your support!

Quick Overview

  • The Federal Court of Australia is migrating its CourtPath system to Microsoft Azure.
  • This change aims to incorporate cloud-based AI services into CourtPath.
  • The migration is part of a broader cloud transformation strategy at the Court.
  • Objectives include enhancing case management functionalities through 2026.
  • The transition will also set the stage for overhauling the Commonwealth Courts Portal.
  • An AI-driven record management solution is projected for late 2025.

Shifting CourtPath to the Cloud

The Federal Court of Australia is advancing technologically by shifting its CourtPath case and document management system to the Microsoft Azure cloud platform. This transition is a tactical move to upgrade the system with sophisticated AI functionalities available through Azure.

Federal Court transitions CourtPath to Azure cloud

Boosting Efficiency with Cloud Technologies

Initially designed to unify various digital tools within the court system, CourtPath offers a consolidated platform for the upload and retrieval of documents pertinent to legal cases. The ongoing transition to cloud infrastructure aims to enhance operational efficiency and incorporate new AI tools.

Wider Cloud Transformation Efforts

Chief Information and Digital Officer of the Federal Court of Australia, Nathan Price, has stated that the shift of CourtPath to the cloud is a primary objective for the remainder of 2025. This effort is part of a larger initiative to evaluate and migrate additional court systems to the cloud, thus capitalizing on the vast AI and cognitive services provided by Microsoft Azure.

Upcoming Developments and AI Integration

Besides current updates, there are plans to utilize the cloud transition as a basis for the redevelopment of the Commonwealth Courts Portal. This portal is vital for external stakeholders, including law firms, to engage with and monitor legal cases. Additionally, an AI-enabled record management solution is expected to be launched by late 2025, improving adherence to record-keeping regulations.

Conclusion

The transition of the CourtPath system of the Federal Court of Australia to Microsoft Azure represents a major milestone in updating its technological infrastructure. By embracing cloud-native AI services, the Court seeks to enhance efficiency and establish a foundation for future improvements in case management and document access.

Q: What is CourtPath?

A: CourtPath is an internal case management platform that facilitates the consolidated upload and access of documents related to legal proceedings within the Federal Court of Australia.

Q: Why is the Federal Court migrating CourtPath to Azure?

A: The migration to Azure is intended to integrate advanced cloud-based AI services to improve the capabilities and efficiency of the system.

Q: What future initiatives are planned after this transition?

A: After the transition, plans include the redevelopment of the Commonwealth Courts Portal and the introduction of an AI-enabled record management solution by late 2025.

Q: How will the AI integration benefit the CourtPath system?

A: AI integration will enhance the system’s case management features, increase efficiency, and ensure compliance with record-keeping standards.