Alerts and Advisories

Top alerts and advisories

09 Dec 2024

Alert rating: Critical

Critical security vulnerabilities affecting Mitel MiCollab version 9.8 SP1 FP2 (9.8.1.201) and earlier

ASD’s ACSC is aware of multiple critical vulnerabilities impacting Mitel MiCollab collaboration applications.

Audience focus: Small & medium businesses Organisations & Critical Infrastructure Government

04 Dec 2024

Advisory

Enhanced visibility and hardening guidance for communications infrastructure

This guide provides network engineers and defenders of communications infrastructure with best practices to strengthen their visibility and harden their network devices against successful exploitation carried out by PRC-affiliated and other malicious cyber actors.

Audience focus: Organisations & Critical Infrastructure Government

21 Nov 2024

Advisory

#StopRansomware: BianLian Ransomware Group

The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) are releasing this joint Cybersecurity Advisory to disseminate known BianLian ransomware and data extortion group IOCs and TTPs identified through FBI and ASD's ACSC investigations as of March 2023.

Audience focus: Small & medium businesses Organisations & Critical Infrastructure

All alerts and advisories

20 Sep 2024

Alert rating: Critical

Critical vulnerability in Ivanti CSA 4.6 (Cloud Services Appliance)

Ivanti has released a security advisory addressing a critical vulnerability affecting Ivanti CSA 4.6 (Cloud Services Appliance). The vulnerability affects Ivanti CSA 4.6 before Patch 519.

Audience focus: Small & medium businesses Organisations & Critical Infrastructure Government

19 Sep 2024

Advisory

People’s Republic of China-Linked Actors Compromise Routers and IoT Devices for Botnet Operations

Cyber actors may have used botnet to compromise thousands of Internet-connected devices.

Audience focus: Individuals & families Small & medium businesses Organisations & Critical Infrastructure Government

06 Sep 2024

Advisory

Russian Military Cyber Actors Target U.S. and Global Critical Infrastructure

The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and National Security Agency (NSA) assess that cyber actors affiliated with the Russian General Staff Main Intelligence Directorate (GRU) 161st Specialist Training Center (Unit 29155) are responsible for computer network operations against global targets for the purposes of espionage, sabotage, and reputational harm since at least 2020.

Audience focus: Organisations & Critical Infrastructure Government

02 Sep 2024

Advisory

The silent heist: cybercriminals use information stealer malware to compromise corporate networks

Information stealer malware steals user login credentials and system information that cyber threat actors exploit, predominantly for monetary gain. Information stealers have been observed in attacks against multiple organisations and sectors worldwide, including Australia. This advisory provides readers with cyber security guidance on information stealers, including threat activity and mitigation advice for individuals and organisations.

Audience focus: Individuals & families Small & medium businesses Organisations & Critical Infrastructure

28 Aug 2024

Alert rating: Medium

Email scammers impersonating the ASD's ACSC

Email scammers are impersonating the ASD's ACSC sending out phishing emails to the public with the email content suggesting to download a malicious antivirus program.

Audience focus: Individuals & families

21 Jul 2024

Alert rating: Critical

Widespread outages relating to CrowdStrike software update

A CrowdStrike software update has led to outages impacting Windows systems.

Audience focus: Small & medium businesses Organisations & Critical Infrastructure Government

Think you might be impacted?

Cybercrime is the use of a computer or online network to commit crimes such as fraud, online image abuse, identity theft or threats and intimidation.

You can report cybercrime to the police via ReportCyber.

What are you looking for?

About us

Learn the basics

Protect yourself

Threats

Report and recover

Resources for business and government

Top alerts and advisories

All alerts and advisories

Think you might be impacted?

Thanks for your feedback!

Optional

Acknowledgement of Country

Alerts and Advisories

Top alerts and advisories

Critical security vulnerabilities affecting Mitel MiCollab version 9.8 SP1 FP2 (9.8.1.201) and earlier

Enhanced visibility and hardening guidance for communications infrastructure

#StopRansomware: BianLian Ransomware Group

All alerts and advisories

Critical vulnerability in Ivanti CSA 4.6 (Cloud Services Appliance)

People’s Republic of China-Linked Actors Compromise Routers and IoT Devices for Botnet Operations

Russian Military Cyber Actors Target U.S. and Global Critical Infrastructure

The silent heist: cybercriminals use information stealer malware to compromise corporate networks

Email scammers impersonating the ASD's ACSC

Widespread outages relating to CrowdStrike software update

Think you might be impacted?

Never miss a threat

Thanks for your feedback!

Optional