Critical Infrastructure Security Centre retweeted
❗ ALERT ❗ We are aware of malicious cyber actors targeting Cisco SD-WANs globally. Along with our partners we have released a Cisco SD-WAN Threat Hunt Guide to support network detection of and response to the actors. Read the full alert and hunt guide 👉cyber.gov.au/about-us/view-a…
Critical Infrastructure Security Centre retweeted
❗ ALERT ❗ We are aware of a vulnerability in the Microsoft Windows Server Update Service. The vulnerability impacts Microsoft Windows Server Update Service in Windows Server (2012, 2016, 2019, 2022 and 2025).
Read the full alert 👉 cyber.gov.au/about-us/view-a…
Critical Infrastructure Security Centre retweeted
❗ALERT❗ We are aware of multiple vulnerabilities impacting Cisco ASA 5500-X Series models. Affected organisations should investigate environments for potential malicious activity and consult Cisco for guidance and mitigation advice. Read the full alert 👉cyber.gov.au/about-us/view-a…
Critical Infrastructure Security Centre retweeted
❗ ALERT ❗ We are aware of active exploitation of a vulnerability in SonicWall SSL VPNs. Organisations should consult the vendor for mitigation advice, including changing passwords after updating firmware. Read the full alert 👉 cyber.gov.au/about-us/view-a…
Critical Infrastructure Security Centre retweeted
❗ ALERT ❗ We are aware of multiple vulnerabilities impacting NetScaler ADC and NetScaler Gateway. Organisations should review their networks for vulnerable instances and update software to a newer version 👉 cyber.gov.au/about-us/view-a…
Critical Infrastructure Security Centre retweeted
❗ ALERT ❗ ASD’s ACSC is aware of a vulnerability affecting instances of Microsoft Office SharePoint Server products. Organisations should take immediate action 👉 cyber.gov.au/about-us/view-a…
Critical Infrastructure Security Centre retweeted
❗ ALERT ❗ There are 2 vulnerabilities in Ivanti Endpoint Manager Mobile (EPMM). Australian organisations should review their networks for the use of Ivanti EPMM and apply the latest patches available.
Read the full alert 👉 cyber.gov.au/about-us/view-a…
Critical Infrastructure Security Centre retweeted
Enabling organisations to uplift their cyber security using #ZeroTrust and #Secure-by-Design is a core priority for us. If you manage networks or procure IT, we want your insights to provide relevant, meaningful guidance.
Have your say 👉 cyber.gov.au/resources-busin…
Critical Infrastructure Security Centre retweeted
In collaboration with international partners, we have released new guidance on being Secure by Demand, focusing on the considerations that operational technology owners & operators should prioritise when selecting digital products. Read the publication 👉 cyber.gov.au/resources-busin…
Critical Infrastructure Security Centre retweeted
❗ ALERT ❗ Fortinet has identified a critical vulnerability in FortiOS and FortiProxy that is being actively exploited. Organisations should patch to the latest version and apply the mitigations in the Fortinet vulnerability notification 👉 cyber.gov.au/about-us/view-a…
Critical Infrastructure Security Centre retweeted
❗ ALERT ❗ We are aware of vulnerabilities affecting Ivanti Connect Secure, Policy Secure and ZTA Gateways. Organisations should patch to the latest version of affected products, where available, and read through Ivanti's published advice to remediate 👉 cyber.gov.au/about-us/view-a…
Critical Infrastructure Security Centre retweeted
Join our town hall on Monday 16 December between 1pm – 2pm AEDT, on the Cyber Security Legislative Package – Consultation on Subordinate Legislation.
Register here👉 events.humanitix.com/cyber-s…
Critical Infrastructure Security Centre retweeted
! ALERT ! A critical vulnerability has been found in Apache Struts2 impacting versions below 6.4.0 (CVE-2024-53677).
Affected organisations and users are encouraged to apply available patches and workarounds as soon as possible.
Read the alert at cyber.gov.au/about-us/view-a…
Critical Infrastructure Security Centre retweeted
We have updated our advice on choosing secure and verifiable technologies to include additional insights about potential threats to supply chains, and released executive guidance for senior leaders. Read more 👉 cyber.gov.au/resources-busin… #SecureByDesign
Critical Infrastructure Security Centre retweeted
❗ ALERT ❗ We are aware of multiple critical vulnerabilities impacting Mitel MiCollab collaboration applications. The vulnerabilities identified may allow access to sensitive content. For more info 👉 cyber.gov.au/about-us/view-a…
Critical Infrastructure Security Centre retweeted
Malicious cyber actors are targeting critical infrastructure. Our #ASDCyberThreatReport reveals the targeting of Australian networks is likely to increase as they grow in size and complexity.
Learn about the latest #CyberSecurity threats in our report 👉 cyber.gov.au/about-us/view-a…
Critical Infrastructure Security Centre retweeted
❗ ALERT ❗ ASD’s ACSC is aware of a vulnerability affecting all versions of Fortinet’s FortiManager device. The vulnerability enables an unauthorised actor to gain access to the FortiManager console (CVE-2024-47575).
For more information 👉 cyber.gov.au/about-us/view-a…
Critical Infrastructure Security Centre retweeted
The 3G networks close from 28 October. If you or someone you know use a 3G or 4G device, text ‘3’ to ‘3498’ to find out if it will be impacted. Other devices such as personal medical alarms, smart watches and security systems may also be impacted. Visit 3Gclosure.com.au
Critical Infrastructure Security Centre retweeted
Australia has imposed targeted financial sanctions and travel bans on three Russian citizens for their involvement in the Evil Corp cybercrime group.
Maksim Viktorovich Yakubets, Igor Olegovich Turashev and Aleksandr Viktorovich Ryzhenkov hold senior roles in Evil Corp.
The sanctions are part of a coordinated effort with the United Kingdom and the United States to deter and respond to malicious cyber activity. This is the third use of Australia’s autonomous cyber sanctions framework, and part of ongoing coordinated international law enforcement against cybercrime.
Evil Corp, one of the world's most prolific and long running cybercrime groups, has been responsible for significant cyber incidents, including ransomware attacks, across the US, UK, and Europe for over a decade. Their activities have caused millions in losses and disrupted key sectors including healthcare, critical infrastructure, and government.
Australia continues to face increasing ransomware activity across various sectors. These include critical infrastructure, governments, industry and the Australian community.
The intent of the cyber sanctions framework is to disrupt and impose costs on the perpetrators of malicious cyber activity, such as ransomware, and not to punish victims of crime.
Critical Infrastructure Security Centre retweeted
❗ JOINT ADVISORY ❗ Alongside international partners we have released an advisory on botnet operations linked to the People’s Republic of China cyber actors.
Learn more about this threat and recommended mitigations 👉 cyber.gov.au/about-us/view-a…





















