Alerts and advisories

All alerts and advisories

Email scammers are impersonating the ASD's ACSC sending out phishing emails to the public with the email content suggesting to download a malicious antivirus program.

Audience focus: Individuals & families Small & medium businesses Organisations & Critical Infrastructure Government

15 Jan 2025

Alert rating: Critical

FortiOS & FortiProxy - Authentication bypass in Node.js websocket module vulnerability

Fortinet has released information regarding an identified vulnerability in FortiOS version 7.0 and FortiProxy versions 7.0 and 7.2 instances. ASD’s ACSC recommends customers follow the advice contained in Fortinet’s notification.

Audience focus: Small & medium businesses Organisations & Critical Infrastructure Government

09 Jan 2025

Alert rating: Critical

Critical vulnerabilities in Ivanti Connect Secure, Ivanti Policy Secure and Ivanti Neurons for ZTA Gateways

Ivanti has identified critical vulnerabilities affecting Ivanti Connect Secure, Ivanti Policy Secure and Ivanti Neurons for ZTA Gateways. Customers should update to available patched versions immediately and monitor Ivanti’s Security Advisory for further advice.

Audience focus: Small & medium businesses Organisations & Critical Infrastructure Government

13 Dec 2024

Alert rating: Critical

Critical security vulnerability affecting Apache Struts2 below 6.4.0.

ASD’s ACSC is aware of a critical vulnerability impacting Apache Struts2 below 6.4.0 (CVE-2024-53677).

Audience focus: Small & medium businesses Organisations & Critical Infrastructure Government

09 Dec 2024

Alert rating: Critical

Critical security vulnerabilities affecting Mitel MiCollab version 9.8 SP1 FP2 (9.8.1.201) and earlier

ASD’s ACSC is aware of multiple critical vulnerabilities impacting Mitel MiCollab collaboration applications.

Audience focus: Small & medium businesses Organisations & Critical Infrastructure Government

04 Dec 2024

Advisory

Enhanced visibility and hardening guidance for communications infrastructure

This guide provides network engineers and defenders of communications infrastructure with best practices to strengthen their visibility and harden their network devices against successful exploitation carried out by PRC-affiliated and other malicious cyber actors.

Audience focus: Organisations & Critical Infrastructure Government

Think you might be impacted?

Cybercrime is the use of a computer or online network to commit crimes such as fraud, online image abuse, identity theft or threats and intimidation.

You can report cybercrime to the police via ReportCyber.

What are you looking for?

About us

Learn the basics

Protect yourself

Threats

Report and recover

Resources for business and government

All alerts and advisories

Think you might be impacted?

View other content topics

Thanks for your feedback!

Optional

Acknowledgement of Country

Alerts and advisories

All alerts and advisories

Email scammers impersonating the ASD's ACSC

FortiOS & FortiProxy - Authentication bypass in Node.js websocket module vulnerability

Critical vulnerabilities in Ivanti Connect Secure, Ivanti Policy Secure and Ivanti Neurons for ZTA Gateways

Critical security vulnerability affecting Apache Struts2 below 6.4.0.

Critical security vulnerabilities affecting Mitel MiCollab version 9.8 SP1 FP2 (9.8.1.201) and earlier

Enhanced visibility and hardening guidance for communications infrastructure

Think you might be impacted?

View other content topics

Never miss a threat

Thanks for your feedback!

Optional