Category: Australia Tech News

Quick Overview

• NSW Police’s IPOS upgrade demands an extra $493 million.
• The initiative is delayed by four years, now projected for 2031.
• So far, only one of five systems has been revamped.
• Issues with governance and suppliers have been noted.
• Outdated systems still present operational hazards.
• The updated business case links delays to increasing costs and staffing challenges.

Project Overview

The NSW Police’s ambitious revamp of its Integrated Policing Operating System (IPOS), originally scheduled for completion by mid-next year with a budget of $328 million, has encountered a major hurdle. The latest evaluation shows that the upgrade will need an additional $493 million, delaying the expected completion date to 2031.

The revamp aims to modernize essential systems, such as the Computerised Operational Policing System (COPS), computer-aided dispatching, forensics management, custody management, and intelligence functions.

Audit Findings

The NSW Auditor General’s report points out various governance shortcomings, including ineffective program management and inadequate financial oversight. The choice of a supplier for the COPS revision was notably challenging, with advisories from both internal and external sources concerning the selected company’s capability and financial health.

In spite of these warnings, NSW Police moved forward with a supplier considered “high risk,” leading to notable delays. The organization has since revised its procurement approach, transitioning from a single vendor model to a multi-vendor framework for improved supplier capability and experience.

Financial Impact

The updated business case, created in 2025, identifies several reasons behind the budget excess. These encompass increasing ICT salaries, unfavorable contract conditions, and miscalculations in the original 2020 business case. The transition to a multi-vendor approach has further escalated expenses.

Although the delays and additional financial burdens of the revamp are considerable, the shutdown of the NSW Police mainframe is anticipated to yield $25 million in annual savings beginning FY28.

Legacy Systems and Associated Risks

The dependence on obsolete legacy systems continues to jeopardize the NSW Police’s operational efficiency. These systems, sustained well past their intended lifespan, heighten both capital and ongoing costs while failing to improve future functionalities.

The postponement of the IPOS revamp exacerbates these obstacles, as the force finds it challenging to attract and retain personnel with the essential skills to manage its core systems.

Summary

The NSW Police IPOS revamp is facing substantial hurdles, with budget overruns and delays affecting its advancement. Governance shortcomings and supplier complications have been recognized as significant factors, alongside increasing costs and staffing challenges. As the force strives to modernize its systems, its ongoing reliance on legacy technology continues to present risks to operations.

Frequently Asked Questions

Q: What is causing the delay in the IPOS upgrade?

A: The delay stems from governance shortcomings, supplier challenges, rising costs, and difficulties in holding onto skilled personnel.

Q: How much more funding is required for the IPOS upgrade?

A: An additional $493 million is needed by the NSW Police to finalize the revamp.

Q: Which systems are part of the IPOS revamp?

A: The upgrade includes COPS, computer-aided dispatch, forensics management, custody management, and intelligence functions.

Q: What risks are associated with persisting in the use of legacy systems?

A: Legacy systems introduce technological risks, diminish operational efficiency, and inflate maintenance expenses.

Q: How is NSW Police rectifying the procurement issues?

A: The force has transitioned from a single vendor arrangement to a multi-vendor approach to secure improved supplier capability and experience.

Q: What future savings are anticipated from the revamp?

A: The retirement of the mainframe is projected to save $25 million annually starting from FY28.

Brief Overview

• Canvas cyber incident influences students and staff in Queensland state schools since 2020.
• The data breach encompasses names, email addresses, and school locations.
• No indications of sensitive details such as passwords or financial information being compromised.
• Schools are informing impacted families and personnel.
• The National Cyber Security Coordinator is part of the investigation process.

Summary of the Canvas Cyber Incident

The Queensland government has made it known that students and personnel connected with state schools may have been impacted by a cyber event involving Instructure’s Canvas. The breach is linked to a notorious threat group focusing on global education systems.

QLearn, powered by Canvas, aids 1264 K-12 schools, 572,160 students, and over 73,000 teaching staff within the state.

Information Regarding the Breach

Education Minister John-Paul Langbroek states that the involved data comprises names, email addresses, and school locations. Thankfully, there are no signs indicating that passwords, dates of birth, or financial information have been compromised.

Principals are currently reaching out to impacted families and educators with additional details on the breach.

Broader Impact and Reactions

Other educational institutions, including RMIT University, UTS, TasTAFE Tasmania, and Western Sydney University, are evaluating their vulnerability. Instructure first communicated the incident on May 2, disclosing the involvement of a criminal third party.

Worldwide, numerous universities and schools are likewise addressing similar challenges due to the attack.

The National Cyber Security Coordinator, Lieutenant General Michelle McGuinness, has commenced coordination efforts to investigate and alleviate the consequences. Updates will be provided as the situation progresses.

Conclusion

The recent cyber event involving the Canvas system has raised alarms about data security within Queensland’s educational sector. While sensitive information seems to remain secure, the breach highlights the necessity for robust cybersecurity protocols in educational establishments.

Q: What data was affected in the Canvas cyber incident?

A: Names, email addresses, and school locations were affected.

Q: Were passwords or financial information compromised?

A: No evidence indicates that passwords, dates of birth, or financial details were compromised.

Q: How are impacted individuals being updated?

A: School principals are reaching out to families and personnel to relay information regarding the breach.

Q: Is the breach impacting institutions beyond Queensland?

A: Yes, other institutions across Australia and globally are examining their potential risk.

Q: Who is managing the investigation of the breach?

A: The National Cyber Security Coordinator is leading the investigation and response initiatives.

Q: What actions are being taken to respond to the breach?

A: Coordinated efforts are underway to comprehend the impact and prevent future occurrences.

Brief Overview

• Figure 03 robots exhibit enhanced skills in home tasks.
• Robots reveal sophisticated spatial perception and movement abilities.
• Potential to reshape home chores, conserving time and energy.
• Pricing remains a hurdle, though costs are projected to decrease.
• Robust industry collaborations strengthen safety and development efforts.

Transforming Home Tasks

Figure has released a new clip featuring their humanoid robot, Figure 03, performing intricate household chores. This advancement represents a major progression from earlier industrial applications, demonstrating robots organizing a bedroom space with skill and finesse.

Enhanced Motor Abilities and Spatial Sensing

The video showcases the robot’s capability to operate a trash bin with its foot, illustrating its advanced spatial reasoning and coordination. Figure 03 also manages delicate electronic devices carefully, highlighting its precise motor abilities.

Collaboration and Solution Finding

In a notably remarkable scene, two Figure 03 robots collaborate to make a bed, efficiently arranging cushions and smoothing a duvet. This activity, which is challenging for robotics due to the unpredictable nature of fabrics, demonstrates significant improvements in Figure’s real-time solution-finding algorithms.

From Industry to Home

Figure’s advancements signify rapid progress, evolving from simple movement to handling complex home tasks. The inclusion of visual language models enables these robots to adjust to their environments and respond to verbal commands, offering insight into future domestic applications.

Design and Safety Hurdles

The layout of Figure 03 appears sophisticated, with smooth movements and integrated sensors. While adapting to home settings presents challenges, the video implies readiness for domestic maintenance, potentially including activities like laundry and washing dishes.

Financial Aspects

At present, the price of such high-tech robots poses a substantial challenge. Nonetheless, as production scales and supply chains develop, costs are anticipated to lower to about $30,000, similar to the price of a modest vehicle.

Collaborative Ventures and Future Prospects

Figure AI’s partnerships with organizations such as OpenAI and BMW enhance their capabilities, providing vital resources and data for safe integration into homes. The swift advancement suggests a future where humanoid robots become as ubiquitous as traditional household appliances.

Conclusion

The latest advancements by Figure signify a crucial progression towards the incorporation of humanoid robots into everyday life. With their refined skills in managing household tasks, these robots could soon alter the landscape of home chores, hinting at a future where such devices are commonplace.

Q: What functions can Figure 03 robots perform?

A: Figure 03 robots have shown abilities in organizing spaces, managing electronics, and making beds.

Q: How do Figure 03 robots interact with soft materials?

A: The robots utilize sophisticated real-time problem-solving software to navigate and manipulate soft, unpredictable materials like bedding.

Q: What obstacles do Figure 03 robots face in domestic settings?

A: Adjusting to the presence of pets, children, and various household items presents distinct challenges compared to regulated industrial environments.

Q: What is the anticipated cost of a Figure 03 robot?

A: The industry aims to lower the cost to around $30,000 as production and supply systems develop.

Q: What advantages do industry collaborations provide for Figure AI?

A: Collaborations with firms like OpenAI and BMW furnish Figure with essential resources and testing environments to improve robot development and safety measures.

Concise Overview

• The Australian Cyber Security Centre (ACSC) alerts users about a new ClickFix scheme aimed at Windows users featuring Vidar Stealer malware.
• ClickFix deceives users into jeopardizing their systems via counterfeit Cloudflare CAPTCHA cues.
• Compromised WordPress websites are utilized to transmit harmful commands through injected JavaScript.
• Apple and Microsoft are implementing measures to safeguard users from these attack methods.
• ACSC advises updating WordPress sites and limiting the execution of untrusted applications.

What Exactly is ClickFix?

The ClickFix strategy is an advanced form of social manipulation that takes advantage of user trust by encouraging them to execute detrimental commands on their own machines. This tactic has become well-known as attackers deploy fake CAPTCHA verifications to spread malware such as Vidar Stealer.

Mechanism of the Attack

Perpetrators infiltrate legitimate Australian corporate websites operating on WordPress by embedding harmful JavaScript code. This code, triggered by user interaction with a fraudulent CAPTCHA, copies a malicious PowerShell command to the user’s clipboard. The attack subsequently prompts the victim to execute this command with administrative permissions, thus compromising their own device.

Consequences and Advice

The ACSC has stressed the importance for government bodies, businesses, and individuals to prevent untrusted scripts from executing. Administrators of WordPress should confirm that their sites are updated and devoid of outdated plugins to avert compromise.

Technological Defenses

Both Apple and Microsoft are proactively addressing ClickFix threats. Apple has improved its XProtect anti-malware tool and rolled out new security notifications in macOS. Microsoft has documented the progression of the attack and is enhancing its Defender software to provide stronger protection for users.

Overview

The ClickFix scam poses a considerable threat to users who inadvertently jeopardize their own systems. With the ACSC’s recommendations and the proactive initiatives from tech companies, users can enhance their defense against this escalating risk.

Q&A

Q: What exactly is Vidar Stealer?

A: Vidar Stealer refers to a type of malware that extracts confidential data from infected systems, including passwords and financial information.

Q: How can I safeguard my WordPress site from breach?

A: Ensure your site is consistently updated, eliminate any unused or obsolete themes and plugins, and adopt robust security protocols.

Q: What steps should I take if I suspect a ClickFix breach?

A: Disconnect from the internet immediately, perform a comprehensive antivirus scan, and obtain professional cybersecurity help.

Q: How does the deceptive CAPTCHA trick function?

A: Users encounter a counterfeit CAPTCHA that looks authentic, but upon interaction, it transmits harmful commands to the clipboard.

Q: Why is ClickFix especially perilous?

A: It manipulates user trust and uses social engineering to compel users to run harmful commands themselves, evading numerous security safeguards.

Quick Summary

• PCPJack is a recently identified malware aimed at cloud infrastructures.
• It eliminates malicious scripts from TeamPCP and deploys its own.
• PCPJack captures credentials from multiple services and seeks lateral movement.
• Distinct from other malware, it refrains from participating in cryptocurrency mining.
• The malware takes advantage of services like Docker, Kubernetes, and MongoDB.