Search

Protecting your business and employees

Apr 11, 2023 Cybercriminals can attack your business and employees at any time. Follow these resources to find out how to make your business and employees cyber secure.

Quiz library Guidance

Test your knowledge about cyber security practices and threats through our quizzes.

Report

Apr 11, 2023 Report a cybercrime, incident or vulnerability.

Secure-by-Design

Jul 22, 2024 Secure-by-Design is a proactive, security-focused approach to the development of digital products and services that necessitates a strategic alignment of an organisation’s cyber security goals. Secure-by-Design requires cyber threats to be considered from the outset to enable mitigations through thoughtful design, architecture and security measures. Its core value is to protect consumer privacy and data through designing, building, and delivering products with fewer vulnerabilities.

Update your small business cyber security News

Jun 12, 2024 Resources to help protect small businesses from cyber threats.

Advisory 2021-004: Active exploitation of ForgeRock Access Manager / OpenAM servers Advisory

Jul 9, 2021 The Australian Signals Directorate’s Australian Cyber Security Centre (ASD's ACSC) has identified targeting and compromise of Australian organisations with vulnerable internet-accessible servers running ForgeRock Access Manager (ForgeRock AM). ForgeRock AM was previously known as OpenAM. The ASD's ACSC has observed malicious actors exploiting the vulnerability in ForgeRock AM/OpenAM to gain initial access to networks in multiple organisations, and facilitate further access within these networks. On 7 July 2021 the ASD's ACSC alerted organisations that this vulnerability was being actively exploited. This ASD's ACSC advisory provides recommendations for securing ForgeRock AM against vulnerability CVE-2021-35464, and advice on identifying potential successful exploitation of this vulnerability.

Small Business Cloud Security Guides News

Dec 16, 2022 The Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) has released a series of guides designed to help small businesses secure their cloud environment.

Hardening Linux Workstations and Servers Publication

Nov 27, 2023 This publication has been developed to assist organisations in understanding how to harden Linux workstations and servers.

Security Configuration Guide – Samsung Galaxy S10, S20 and Note 20 Devices Publication

Oct 6, 2021 ASD has developed this guide to assist Australian’s to understand risks when deploying Samsung Galaxy and Samsung Note devices and the security requirements that need to be met to allow them to handle classified data.

Turn on multi-factor authentication

Nov 9, 2022 Protect your important accounts with extra login steps.

Managing the Risks of Legacy IT: Executive Guidance Publication

Jun 12, 2024 This publication provides high-level and strategic guidance for an organisation’s executive seeking to manage the risks of legacy IT.

Preparing for and responding to denial-of-service attacks Publication

Mar 27, 2023 Although organisations cannot avoid being targeted by denial-of-service attacks, there are a number of measures that organisations can implement to prepare for and potentially reduce the impact if targeted. Preparing for denial-of-service attacks before they occur is by far the best strategy, it is very difficult to respond once they begin and efforts at this stage are unlikely to be effective.

COVID-19 scam messages Advisory

Mar 16, 2020 The Australian Signals Directorate’s Australian Cyber Security Centre (ASD's ACSC) is aware of a COVID-19 themed scam being distributed via text message.

Set secure passphrases

Jul 30, 2024 Where multi-factor authentication is not available, a strong passphrase is your best defence. 

Guidelines for Personnel Security Advice

Sep 26, 2024 This chapter of the Information Security Manual (ISM) provides guidance on personnel security.

Online shopping Guidance

Nov 7, 2023 Be secure when shopping online.

Security tips for personal devices Guidance

Feb 9, 2024 There are a lot of things to think about when it comes to the use of personal devices (e.g. smartphones, tablets, computers and laptops). For example, compromises of personal devices and the information they store can have significant productivity, financial and emotional impacts. This publication has been written to provide security tips to secure personal devices and protect your information.

Important Vulnerabilities in Microsoft’s July 2023 Security Update Alert

Jul 13, 2023 The Australian Signals Directorate’s Australian Cyber Security Centre (ASD's ACSC) is concerned about vulnerabilities disclosed in Microsoft’s July 2023 Security Update. Government, businesses and individuals should patch their Microsoft products and apply any recommended mitigations as soon as possible.

An Introduction to Artificial Intelligence Publication

Nov 24, 2023 Artificial Intelligence (AI) is an emerging technology that will play an increasingly influential role in the everyday life of Australians.

Guidelines for Networking Advice

Sep 26, 2024 This chapter of the Information Security Manual (ISM) provides guidance on networking.

Small Business Cloud Security Guides

Apr 2, 2024 ASD's ACSC has released a series of guides designed to help small businesses secure their cloud environment.

After you've made a purchase Guidance

Once you’ve made a purchase you still need to remain vigilant. Cybercriminals can target you even after you’ve made a purchase on a legitimate website. Learn what to look out for after you’ve bought something online.

Detecting and mitigating Active Directory compromises Publication

Sep 26, 2024 This publication provides an overview of techniques used to compromise Active Directory, and recommended strategies to mitigate these techniques. By implementing the recommendations in this publication, organisations can significantly improve their Active Directory security, and therefore their overall network security posture.

View all content

Nov 3, 2022

Important Vulnerabilities in Microsoft’s October 2023 Security Update Alert

Oct 13, 2023 The Australian Signals Directorate’s Australian Cyber Security Centre (ASD's ACSC) is concerned about vulnerabilities disclosed in Microsoft’s October 2023 Security Update. Government, businesses and individuals should patch their Microsoft products and apply any recommended mitigations as soon as possible.

Preventing business email compromise Guidance

Apr 11, 2023 There are many easy steps and actions you can take now to protect your business. Learn about the simple, cost-effective and immediately beneficial protective measures you can implement.

Cyber Security Terminology Advice

Sep 26, 2024 This chapter of the Information Security Manual (ISM) provides guidance on cyber security terminology.

Web Conferencing Security Publication

Oct 6, 2021 Web conferencing tools are essential for meeting with colleagues and clients online. This guide provides tips on how to choose a secure web conference provider, and what risks to be aware of.

Gateway Security Guidance Package: Overview Publication

Jul 29, 2022 This page provides an overview of ASD’s Gateway Security Guidance Package.

Guidelines for Gateways Advice

Sep 26, 2024 This chapter of the Information Security Manual (ISM) provides guidance on gateways.