On 2 March 2021 Microsoft released information regarding multiple exploits being used to compromise instances of Microsoft Exchange Server. Malicious actors are exploiting these vulnerabilities to compromise Microsoft Exchange servers exposed to the internet, enabling access to email accounts and to enable further compromise of the Exchange server and associated networks.

Australians are being urged to strengthen their cyber defences and be alert to online threats through a new national cyber security campaign.

The Australian Security Intelligence Organisation has launched the Think Before You Link campaign which aims to raise awareness of the threat of malicious social media profiles, and educate current and former security clearance holders to understand the signs of a malicious approach online.

The ACSC is aware of a recently disclosed critical vulnerability in Microsoft Active Directory Domain Controller systems that allows unauthenticated attackers to trivially access administrative credentials.

The Australian Government is aware of, and responding to, a sustained targeting of Australian governments and companies by a sophisticated state-based actor. The title ‘Copy-paste compromises’ is derived from the actor’s heavy use of tools copied almost identically from open source.