
XPON acquires Alpha Digital to boost AI marketing services
The acquisition will see XPON integrate Alpha Digital's agency expertise in strategy with its own AI technology, which includes a proprietary Customer Data Platform called Wondaris, as well as services utilising the Google Marketing Platform and Google Cloud. According to XPON, the deal will allow marketers to better predict customer behaviour and customise advertising and communications on a greater scale.
XPON has stated that it will maintain its partnership model with independent media agencies, aiming to deliver a strengthened service offering through collaboration and leveraging its established relationship with Google. The company intends to continue supporting independent partners, while facilitating faster growth pathways utilising advanced AI tools.
XPON was recently recognised as the best media AI innovator at the Australian AI Awards and has also previously received Google's Advanced Data and AI Partner Award. XPON emphasises that its technology provides immediately actionable insights for marketers, allowing campaign automation and measurable business results.
Matt Forman, Founder and Group Managing Director of XPON, said, "Alpha has built a quality business with excellent customers in key verticals, like retail, for over a decade. It's that reputation that made them one of our first agency partners. We have an alignment on values for our customers, as well as the culture we're building for our people. Both share a focus on customer-centricity and when Alpha's smart team is armed with our latest technology, I can't wait to see the results they'll deliver."
He added, "Our new combined offering creates an unrivalled suite of AI marketing solutions that help businesses acquire, retain, and monetise customers, with transparency. This acquisition is an important step forward for us and the industry as we drive the modernisation of marketing and customer experience."
Alpha Digital will continue to operate under its own brand name and maintain independence in its operations, retaining its specialised expertise. The agency, which has been in business for 14 years, has clients including Target, K-Mart, and QUT. Matt Cooper, Alpha Digital's Founder and Chief Executive Officer, will continue to lead the agency as CEO, focusing on driving growth.
Matt Cooper commented, "I've spent over two decades in digital marketing, and the pace of change we're seeing with AI right now is unlike anything before. And it's getting exponentially faster. This move gives Alpha the depth of tech capability needed to keep our clients not just current, but ahead.
"In the past, marketers would build a handful of personas based on assumptions about their audience. Today, AI can identify hundreds of profitable personas and predict their customer journeys with speed & accuracy. And soon we will be able to automatically design and deploy tailored strategies for each and every profitable customer persona. That level of precision and scalability is the future of marketing, and with XPON, we're ready to lead it," Cooper said.
The Alpha Digital acquisition is XPON's first foray into agency acquisition and forms part of a broader mergers and acquisitions strategy. The company has indicated that it will focus on further opportunities in the tech-enabled digital marketing sector, aiming to acquire businesses that are well-positioned to accelerate AI transformation. XPON has reaffirmed its commitment to supporting its ecosystem of independent agency partners while expanding its direct service capabilities.
Matt Forman of XPON stated, "The next evolution of marketing is already here and we're excited to be at the forefront of what comes next, offering a competitive advantage, together with Alpha Digital."
Hashtags

Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles


Techday NZ
21 hours ago
- Techday NZ
Google Cloud unveils advanced AI security tools & SOC updates
Google Cloud has announced new security solutions and enhanced capabilities focused on securing AI initiatives and supporting defenders in the context of growing enterprise adoption of artificial intelligence technologies. With the introduction of AI across various sectors, organisations are increasingly concerned with the risks presented by sophisticated AI agents. Google Cloud has responded by expanding on the security measures available within its Security Command Centre, emphasising protection for AI agents and ecosystems using tools such as Sensitive Data Protection and Model Armour. According to Jon Ramsey, Vice President and General Manager, Google Cloud Security, "AI presents an unprecedented opportunity for organizations to redefine their security posture and reduce the greatest amount of risk for the investment. From proactively finding zero-day vulnerabilities to processing vast amounts of threat intelligence data in seconds to freeing security teams from toilsome work, AI empowers security teams to achieve not seen before levels of defence and efficiency." Expanded protection for agentic AI Google Cloud has detailed three new capabilities for securing AI agents in Google Agentspace and Google Agent Builder. The first, expanded AI agent inventory and risk identification, will enable automated discovery of AI agents and Model Context Protocol (MCP) servers. This feature aims to help security teams quickly identify vulnerabilities, misconfigurations, and high-risk interactions across their AI agent estate. The second, advanced in-line protection and posture controls, extends Model Armour's real-time security assurance to Agentspace prompts and responses. This enhancement is designed to provide controls against prompt injection, jailbreaking, and sensitive data leakage during agent interactions. In parallel, the introduction of specialised posture controls will help AI agents adhere to defined security policies and standards. Proactive threat detection rounds out these developments, introducing detections for risky behaviours and external threats to AI agents. These detections, supported by intelligence from Google and Mandiant, assist security teams in responding to anomalous and suspicious activity connected to AI agents. Agentic security operations centre Google Cloud is advancing its approach to security operations through an 'agentic SOC' vision in Google Security Operations, which leverages AI agents to enhance efficiency and detection capabilities. By automating processes such as data pipeline optimisation, alert triage, investigation, and response, Google Cloud aims to address traditional gaps in detection engineering workflows. "We've introduced our vision of an agentic security operations center (SOC) that includes a system where agents can coordinate their actions to accomplish a shared goal. By offering proactive, agent-supported defense capabilities built on optimizing data pipelines, automating alert triage, investigation, and response, the agentic SOC can streamline detection engineering workflows to address coverage gaps and create new threat-led detections." The new Alert Investigation agent, currently in preview, is capable of autonomously enriching events, analysing command-line interfaces, and building process trees. It produces recommendations for next steps and aims to reduce the manual effort and response times for security incidents. Expert guidance and consulting Google Cloud's Mandiant Consulting arm is extending its AI consulting services in response to demand for robust governance and security frameworks in AI deployments. These services address areas such as risk-based AI governance, pre-deployment environment hardening, and comprehensive threat modelling. Mandiant Consulting experts noted, "As more organizations lean into using generative and agentic AI, we've seen a growing need for AI security consulting. Mandiant Consulting experts often encounter customer concerns for robust governance frameworks, comprehensive threat modeling, and effective detection and response mechanisms for AI applications, underscoring the importance of understanding risk through adversarial testing." Clients working with Mandiant can access pre-deployment security assessments tailored to AI and benefit from continuous updates as threats evolve. Unified platform enhancements Google Unified Security, a platform integrating Google's security solutions, now features updates in Google Security Operations and Chrome Enterprise. Within Security Operations, the new SecOps Labs offers early access to AI-powered experiments related to parsing, detection, and response, many of which use Google Gemini technology. Dashboards with native security orchestration, automation, and response (SOAR) data integration are now generally available, reflecting user feedback from previous previews. On the endpoint side, Chrome Enterprise enhancements bring secured browsing to mobile, including Chrome on iOS, with features such as easy account separation and URL filtering. This allows companies to block access to unauthorised AI sites and provides enhanced reporting for investigation and compliance purposes. Trusted Cloud and compliance Recent updates in Trusted Cloud focus on compliance and data security. Compliance Manager, now in preview, enables unified policy configuration and extensive auditing within Google Cloud. Data Security Posture Management, also in preview, delivers governance for sensitive data and integrates natively with BigQuery Security Centre. The Security Command Centre's Risk Reports can now summarise unique cloud security risks to inform both security specialists and broader business stakeholders. Updates in identity management include Agentic IAM, launching later in the year, which will facilitate agent identities across environments to simplify credential management and authorisation for both human and non-human agents. Additionally, the IAM role picker powered by Gemini, currently in preview, assists administrators in granting least-privileged access through natural language queries. Enhanced Sensitive Data Protection now monitors assets in Vertex AI, BigQuery, and CloudSQL, with improvements in image inspection for sensitive data and additional context model detection. Network security innovations announced include expanded tag support for Cloud NGFW, Zero Trust networking for RDMA networks in preview, and new controls for Cloud Armour, such as hierarchical security policies and content-based WAF inspection updates. Commitment to responsible AI security Jon Ramsey emphasised Google Cloud's aim to make security a business enabler: "The innovations we're sharing today at Google Cloud Security Summit 2025 demonstrate our commitment to making security an enabler of your business ambitions. By automating compliance, simplifying access management, and expanding data protection for your AI workloads, we're helping you enhance your security posture with greater speed and ease. Further, by using AI to empower your defenders and meticulously securing your AI projects from inception to deployment, Google Cloud provides the comprehensive foundation you need to thrive in this new era."


Techday NZ
2 days ago
- Techday NZ
Google Cloud warns backup systems face rising cyber threats
Google Cloud has published its latest Cloud Threat Horizons Report H2 2025, detailing key trends and findings around cyber threats targeting cloud environments worldwide. The report draws on analysis conducted by Google Cloud's Office of the CISO, Google Threat Intelligence Group (GTIG), Mandiant Consulting, and internal security teams. It underscores the increasing sophistication of threat actors and the growing risk that organisations face. Credential compromise and misconfiguration Analysis indicates that credential-based attacks remain the most prevalent threat vector within cloud ecosystems. According to the report, weak or absent credentials were responsible for 47.1% of recorded cloud incidents during the period under review. Misconfigurations contributed to 29.4% of incidents, while compromises via API or user interface accounted for 11.8%. The report notes that these figures highlight the persistent vulnerabilities in identity management and system configuration, which malicious actors continue to exploit at scale. Backup systems under direct attack One new trend identified is the direct targeting of backup infrastructure by financially motivated threat actors. Google Cloud's security experts observed a pattern of backup system sabotage, including deletion of automated backup routines, data corruption, and manipulation of permissions. "Financially motivated threat actors have escalated tactics, sabotaging backup systems by deleting routines, corrupting data, and manipulating permissions to disrupt recovery and force ransom payouts." Such activity is intended to hinder organisations from recovering after an incident, increasing the leverage available to attackers in extortion attempts. MFA bypass by social engineering The report outlines the emergence of advanced social engineering campaigns that result in multi-factor authentication (MFA) bypass. These attacks involve techniques such as credential theft and session cookie hijacking. A particular focus is given to groups aligned with North Korea. The report singles out UNC4899, also known as TraderTraitor, for its efforts targeting cryptocurrency platforms. "Sophisticated social engineering attacks are enabling MFA bypass, including credential and session cookie theft - especially by North Korea‐aligned group UNC4899 (TraderTraitor) targeting crypto‐asset platforms." Abuse of trusted cloud services Increased exploitation of mainstream cloud and code-hosting services for malware delivery is highlighted by the report. Attackers are reported to be hosting decoy files - such as .desktop files disguised as PDFs - on platforms including Google Drive, GitHub, and Dropbox. These files are designed to trigger silent malware downloads in the background when accessed. "Attackers increasingly exploit platforms like Google Drive, GitHub, Dropbox, and others to host decoy files (e.g., .desktop files masquerading as innocuous PDFs) that trigger background malware downloads." Such activity makes detection more complex due to the abuse of otherwise trusted platforms. Evolving persistence and evasion techniques The publication describes a shift in threat actor tactics towards advanced evasion and persistence strategies. These include efforts to compromise the integrity of recovery chains and supply chain systems, threatening not just data but the infrastructure designed to facilitate post-incident recovery. Expert recommendations Google Cloud security experts emphasise a multi-layered defence approach. Recommendations include strengthening identity and access management practices, prioritising least-privilege principles, enforcing robust credential hygiene, and implementing credential leak detection mechanisms. The report advocates for isolating recovery environments to counter backup sabotage. For instance, Cloud Isolated Recovery Environments (CIRE) can provide additional protection for backup data and help ensure recovery capabilities remain intact after an attack. Vigilance for signs of threat activity is also recommended, particularly with respect to deployment of decoy files and potential MFA bypass attempts enabled via deceptive use of cloud services. Addressing supply chain risk and developer ecosystem security is identified as a further requirement. Google Cloud recommends validation mechanisms - such as Verified CRX Upload for Chrome extensions - as means of preventing malicious software updates within cloud ecosystems. Shifting strategic priorities for defenders The report argues that as organisations increasingly transition to cloud-native environments, attackers have adapted their playbook in response. The new focus targets recovery and backup systems as primary objectives, requiring companies to improve their security posture not only around data, but also recovery infrastructure. "The report underscores that recovery systems are now primary targets, signalling an urgent need for stronger defensive posture across identity, access, and infrastructure resilience." Google Cloud's Cloud Threat Horizons Report H2 2025 is designed to equip security leaders and practitioners with intelligence-backed insights to respond proactively to these developing threats by implementing appropriate mitigation and defence mechanisms.


Techday NZ
7 days ago
- Techday NZ
Oracle & Google Cloud boost AI with Gemini model access
Oracle and Google Cloud have expanded their partnership to provide Oracle customers with direct access to Google's Gemini AI models through the Oracle Cloud Infrastructure Generative AI service. The collaboration gives Oracle customers the ability to leverage Gemini 2.5 and its upcoming model family for enterprise-grade applications, including advanced coding, workflow automation, and domain-specific solutions such as MedLM for healthcare. Expanded AI offerings Through the integration, enterprises will have the opportunity to use Gemini's multimodal capabilities, enabling applications that can handle text, code, and industry-specific tasks. Oracle plans further integrations with Google Cloud's Vertex AI, which will make the entire Gemini model suite - including video, image, speech, and music generation - accessible within Oracle Fusion Cloud Applications across various departments such as finance, HR, supply chain, sales, service, and marketing. Oracle customers will also be able to deploy Gemini models using their existing Oracle Universal Credits, potentially simplifying adoption and controlling costs. Use cases and industry impact Gemini models are designed to provide accuracy and performance for enterprise use cases, partly due to their grounding in up-to-date Google Search data, large context windows, and data privacy features. The models can be used for knowledge retrieval, productivity tools, advanced software development, and sector-specific solutions. Specialised industry models like MedLM for healthcare are among the offerings expected for future integration. The presence of these models within existing Oracle platforms aims to streamline the adoption of AI across industries, supporting teams in tasks that range from automating business processes to building AI-powered agents. Customer access and integration With the expanded partnership, Oracle states customers will have more flexibility and choice over the models they use. As future integrations are developed, customers will be able to select from a range of Gemini models via Vertex AI, directly within Oracle's cloud applications ecosystem. "Today, leading enterprises are using Gemini to power AI agents across a range of use cases and industries," said Thomas Kurian, CEO, Google Cloud. "Now, Oracle customers can access our leading models from within their Oracle environments, making it even easier for them to begin deploying powerful AI agents that can support developers, streamline data integration tasks, and much more." Google's Gemini models have been cited for their enterprise suitability due to features such as encryption, privacy controls, and reasoning abilities. Clay Magouyrk, President, Oracle Cloud Infrastructure, stated, "Oracle has been intentional in offering model choice curated for the enterprise, spanning open and proprietary models. The availability of Gemini on OCI Generative AI service highlights our focus on delivering powerful, secure, and cost-effective AI solutions that help customers drive innovation and achieve their business goals." Performance and scalability Oracle continues to position its infrastructure as a foundation for running intensive AI workloads. According to the companies, Oracle Cloud Infrastructure offers specialised, cost-effective GPU instances suitable for applications in generative AI, natural language processing, computer vision, and recommender systems. The collaboration is described as a means for customers to apply generative and agentic AI to business needs, with a focus on meeting enterprise requirements for security, adaptability, and performance. Through this partnership, both companies aim to facilitate the deployment of multimodal and AI agent technologies in a broad range of enterprise scenarios.