Alerts and Advisories

Top alerts and advisories

09 Dec 2024

Alert rating: Critical

Critical security vulnerabilities affecting Mitel MiCollab version 9.8 SP1 FP2 (9.8.1.201) and earlier

ASD’s ACSC is aware of multiple critical vulnerabilities impacting Mitel MiCollab collaboration applications.

Audience focus: Small & medium businesses Organisations & Critical Infrastructure Government

04 Dec 2024

Advisory

Enhanced visibility and hardening guidance for communications infrastructure

This guide provides network engineers and defenders of communications infrastructure with best practices to strengthen their visibility and harden their network devices against successful exploitation carried out by PRC-affiliated and other malicious cyber actors.

Audience focus: Organisations & Critical Infrastructure Government

21 Nov 2024

Advisory

#StopRansomware: BianLian Ransomware Group

The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) are releasing this joint Cybersecurity Advisory to disseminate known BianLian ransomware and data extortion group IOCs and TTPs identified through FBI and ASD's ACSC investigations as of March 2023.

Audience focus: Small & medium businesses Organisations & Critical Infrastructure

All alerts and advisories

09 Dec 2024

Alert rating: Critical

Critical security vulnerabilities affecting Mitel MiCollab version 9.8 SP1 FP2 (9.8.1.201) and earlier

ASD’s ACSC is aware of multiple critical vulnerabilities impacting Mitel MiCollab collaboration applications.

Audience focus: Small & medium businesses Organisations & Critical Infrastructure Government

04 Dec 2024

Advisory

Enhanced visibility and hardening guidance for communications infrastructure

Audience focus: Organisations & Critical Infrastructure Government

21 Nov 2024

Advisory

#StopRansomware: BianLian Ransomware Group

Audience focus: Small & medium businesses Organisations & Critical Infrastructure

13 Nov 2024

Advisory

2023 top routinely exploited vulnerabilities

This advisory provides details, collected and compiled by the authoring agencies, on the Common Vulnerabilities and Exposures (CVEs) routinely and frequently exploited by malicious cyber actors in 2023 and their associated Common Weakness Enumerations (CWEs). Malicious cyber actors exploited more zero-day vulnerabilities to compromise enterprise networks in 2023 compared to 2022, allowing them to conduct operations against high priority targets.
The authoring agencies strongly encourage vendors, designers, developers, and end-user organizations to implement the following recommendations, and those found within the Mitigations section of this advisory, to reduce the risk of compromise by malicious cyber actors.

Audience focus: Small & medium businesses Organisations & Critical Infrastructure Government

24 Oct 2024

Alert rating: Critical

Vulnerability in Fortinet’s FortiManager

The ASD’s ACSC is aware of a vulnerability affecting all versions of Fortinet's FortiManager device that enables an unauthorised actor access to the FortiManager console (CVE-2024-47575). FortiManager devices provide centralised management of Fortinet devices from a single console.

Audience focus: Small & medium businesses Organisations & Critical Infrastructure Government

17 Oct 2024

Advisory

Iranian cyber actors’ brute force and credential access activity compromises critical infrastructure

The Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), and the National Security Agency (NSA) are releasing this joint Cybersecurity Advisory to warn network defenders on Iranian cyber actors’ compromising, frequently using brute force attacks, organizations across multiple critical infrastructure sectors, including the healthcare and public health (HPH), government, information technology, engineering, and energy sectors. The actors likely aim to obtain credentials and information describing the victim’s network that can then be sold to enable access to cybercriminals.

Audience focus: Organisations & Critical Infrastructure Government

Think you might be impacted?

Cybercrime is the use of a computer or online network to commit crimes such as fraud, online image abuse, identity theft or threats and intimidation.

You can report cybercrime to the police via ReportCyber.

What are you looking for?

About us

Learn the basics

Protect yourself

Threats

Report and recover

Resources for business and government

Top alerts and advisories

All alerts and advisories

Think you might be impacted?

Thanks for your feedback!

Optional

Acknowledgement of Country

Alerts and Advisories

Top alerts and advisories

Critical security vulnerabilities affecting Mitel MiCollab version 9.8 SP1 FP2 (9.8.1.201) and earlier

Enhanced visibility and hardening guidance for communications infrastructure

#StopRansomware: BianLian Ransomware Group

All alerts and advisories

Critical security vulnerabilities affecting Mitel MiCollab version 9.8 SP1 FP2 (9.8.1.201) and earlier

Enhanced visibility and hardening guidance for communications infrastructure

#StopRansomware: BianLian Ransomware Group

2023 top routinely exploited vulnerabilities

Vulnerability in Fortinet’s FortiManager

Iranian cyber actors’ brute force and credential access activity compromises critical infrastructure

Think you might be impacted?

Never miss a threat

Thanks for your feedback!

Optional