Last updated
Perplexity: Cybersecurity Incident
Zenity Labs bypassed Perplexity's Comet browser agent file:// path boundary twice (via view-source:file:// URLs and a #.pdf/#.html suffix), after the disclosed PleaseFix issue had been patched. The bypasses enabled reading local files, zero-click redirection to attacker pages, and abuse of a 1Password extension to take over a password vault.
Source: Forkast News
- Who
- Perplexity · Australia & New Zealand
- What happened
- Zenity Labs bypassed Perplexity's Comet browser agent file:// path boundary twice (via view-source:file:// URLs and a #.pdf/#.html suffix), after the disclosed PleaseFix issue had been patched. The bypasses enabled reading local files, zero-click redirection to attacker pages, and abuse of a 1Password extension to take over a password vault.
- When
- 2026-10-27
- Source
- Forkast News
Market context: Backdrop: a 109.3 (Hot) Talent Market Index (up 7.6 on the month) with Oceania activity easing (-6.2pts).
Perplexity: 5 signals in the last 90 days; 0.3% of MitchelLake's Oceania signal flow; 9 tracked across 133 days.
MitchelLake in this thematic
Also at Perplexity →
More signals across Oceania
Cybersecurity Incident · Oceania
RMS Cloud →RMS Cloud suffered a cyberattack, which has been followed by a hotel booking scam targeting Western Australian travellers. The source excerpt is truncated, so the attack's scale and technical details are unclear.
Cybersecurity Incident · Oceania
Discovery Parks →Australian holiday park group Discovery Parks disclosed a data security breach linked to a booking software provider, resulting in fraudulent emails and messages being sent to customers and prompting an urgent customer warning.
Cybersecurity Incident · Oceania
Partnered Health →Australian healthcare provider Partnered Health suffered a cyberattack in June affecting 21 clinics, with sensitive patient information, including treatment details and Medicare numbers, believed to have been stolen.
Cybersecurity Incident · Oceania
NT Health →NT Health disclosed a privacy breach in which medical information was posted to Instagram; the number of affected pregnant patients was revised upward from five to 12.
Cybersecurity Incident · Oceania
Royal Darwin Hospital →Confidential medical information of about a dozen pregnant patients at Royal Darwin Hospital was posted to Instagram by a 'medical observer' associated with the facility, a patient data privacy breach.
Cybersecurity Incident · Oceania
Australian Signals Directorate →Australian government websites, including the Australian Signals Directorate's, were affected by a critical flaw in widely used internet programming software.
Where this lands in our work
- Executive Search →
A breach puts the security, technology and risk seats under review; those searches run through our executive search practice.
- Private Equity →
Listed and PE-backed boards renew leadership against a value-creation clock.
- Executive Search: Oceania →
Our Oceania practice runs the searches behind signals like this one.
Intelligence powered by Autonodal ↗