ACSC | Cyber.gov.au

Critical vulnerability in certain versions of Apache HTTP Server

Oct 8, 2021

A vulnerability exists in Apache HTTP Server 2.4.49. A cyber actor could exploit this vulnerability to execute arbitrary code. Initial information also indicates that the vulnerability could also be used perform remote code execution under certain configurations. Affected Australian organisations should apply the available patch.

Microsoft introduces Exchange Emergency Mitigation service

Oct 1, 2021

Microsoft has launched a new optional protection for Microsoft Exchange servers.

Critical vulnerability in certain Hikvision products, IP cameras

Sep 22, 2021

A critical vulnerability exists in Hikvision products, including IP cameras, which could allow a cyber actor to take full control of the device. Affected Australian customers should apply an appropriate firmware update provided by Hikvision.

Remote code execution vulnerability present in Open Management Infrastructure, affects certain Microsoft Azure services

Sep 16, 2021

A remote code execution vulnerability exists in Open Management Infrastructure, a management agent used in certain Linux-based Microsoft Azure services. Exploitation of this vulnerability could allow a malicious actor to take control of the vulnerable host. Affected organisations should apply the available security update.

Remote code execution vulnerability present in the Windows Scripting Engine of Microsoft Windows

Sep 16, 2021

A vulnerability exists in a component of Microsoft Windows. A malicious cyber actor could exploit this vulnerability to execute arbitrary code, potentially enabling the actor to take control of the vulnerable host. Affected Australian customers should apply the security update provided by Microsoft.

ALERTS

View all

Oct 13, 2021 - Alert status: HIGH

Multiple key vulnerabilities identified in Microsoft products

Multiple key vulnerabilities were identified in Microsoft’s 12 October 2021 patch release. While all vulnerabilities addressed in this release are important to mitigate the ACSC wishes to highlight several vulnerabilities for priority consideration.

Oct 13, 2021 - Alert status: HIGH

Critical vulnerability present in certain versions of Apple iOS and iPadOS

A vulnerability has been identified in certain Apple products which could allow an actor to install malware or perform other actions on a vulnerable device.

Oct 8, 2021 - Alert status: CRITICAL

Critical vulnerability in certain versions of Apache HTTP Server

Sep 24, 2021 - Alert status: HIGH

Critical vulnerability in ManageEngine ADSelfService Plus exploited by cyber actors

A vulnerability exists in certain versions of ManageEngine ADSelfService Plus. A cyber actor could exploit this vulnerability to execute arbitrary code, potentially enabling the actor to take control of the vulnerable host. Affected Australian organisations should apply the available security update.

Sep 22, 2021 - Alert status: CRITICAL

Critical vulnerability in certain Hikvision products, IP cameras

About the ACSC

The Australian Cyber Security Centre (ACSC) is based within the Australian Signals Directorate (ASD). We provide advice and information about how to protect you, your family and your business online.

The ACSC’s cyber security mission is supported by ASD’s wider organisation, whose role is to provide foreign signals intelligence and who have a long history of cyber security excellence. We lead the Australian Government’s efforts to improve cyber security. Our role is to help make Australia the most secure place to connect online.

For further information read more about the ACSC.

Information for

Become an ACSC Partner

The ACSC Partnership Program enables a wide range of organisations to engage with the ACSC and fellow partners, drawing on collective understanding, experience, skills and capability to lift cyber resilience across the Australian economy.

Learn More