Contact us
Portal login
1300 CYBER1 (1300 292 371)
Report a cybercrime, cyber security incident or vulnerability.
Get alerts on new threats
Report a cybercrime or cyber security incident
Become a partner
Information Security Manual
A medium alert details a cyber security vulnerability that entities should act soon to mitigate. The ACSC has assessed that network owners and operators need to be notified of the possible threats so that they can take appropriate actions to mitigate risks. Medium alerts refer to vulnerabilities, which if not mitigated against, have the potential to impact Australia, due to a publicly available proof-of-concept or evidence of active exploitation, but comprehensive patches or easily implemented mitigation mechanisms are available.
ASD’s Australian Cyber Security Centre is working closely with Medibank Private following the recent incident.
A low alert details a cyber security vulnerability that entities should be aware of. The ACSC has assessed that network owners and operators should be aware of the possible threats so that they can take appropriate actions to mitigate risks. Low alerts refer to vulnerabilities that, while important for ACSC to disseminate to a widespread audience at a level of urgency, have minimal potential to impact Australia due to the low likelihood of success, lack of a publicly available proof-of-concept, age of the exploit, or other factors.
The Australian Cyber Security Centre (ACSC) has identified a number of critical vulnerabilities affecting VMware’s vRealize Hyperic monitoring and performance management product.
A high alert details a cyber security vulnerability that entities should act quickly to minimise the risk, within 48 hours. The ACSC has assessed that network owners and operators should be informed of the threats so that they can decide on the most appropriate active mitigation actions to minimise risks to their networks. High alerts refer to vulnerabilities that are currently or likely to impact Australia, due to a publicly available proof-of-concept or evidence of active exploitation, and at the time of publication, have no comprehensive patches or easily implemented mitigation mechanisms available.
The Australian Cyber Security Centre (ACSC) is aware of a buffer overrun and buffer overflow vulnerability in OpenSSL versions above to 3.0. All Australian organisations using version 3.x should apply the available patch…
The ACSC has published updated guidance to help ensure consistent Essential Eight assessment across government and industry.
Sign up for the latest cyber security alerts and get information on threats and how to keep yourself secure online.
