Alerts and advisories

All alerts and advisories

This advisory provides details, collected and compiled by the authoring agencies, on the Common Vulnerabilities and Exposures (CVEs) routinely and frequently exploited by malicious cyber actors in 2023 and their associated Common Weakness Enumerations (CWEs). Malicious cyber actors exploited more zero-day vulnerabilities to compromise enterprise networks in 2023 compared to 2022, allowing them to conduct operations against high priority targets.
The authoring agencies strongly encourage vendors, designers, developers, and end-user organizations to implement the following recommendations, and those found within the Mitigations section of this advisory, to reduce the risk of compromise by malicious cyber actors.

Audience focus: Small & medium businesses Organisations & Critical Infrastructure Government

24 Oct 2024

Alert rating: Critical

Vulnerability in Fortinet’s FortiManager

The ASD’s ACSC is aware of a vulnerability affecting all versions of Fortinet's FortiManager device that enables an unauthorised actor access to the FortiManager console (CVE-2024-47575). FortiManager devices provide centralised management of Fortinet devices from a single console.

Audience focus: Small & medium businesses Organisations & Critical Infrastructure Government

17 Oct 2024

Advisory

Iranian cyber actors’ brute force and credential access activity compromises critical infrastructure

The Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), and the National Security Agency (NSA) are releasing this joint Cybersecurity Advisory to warn network defenders on Iranian cyber actors’ compromising, frequently using brute force attacks, organizations across multiple critical infrastructure sectors, including the healthcare and public health (HPH), government, information technology, engineering, and energy sectors. The actors likely aim to obtain credentials and information describing the victim’s network that can then be sold to enable access to cybercriminals.

Audience focus: Organisations & Critical Infrastructure Government

20 Sep 2024

Alert rating: Critical

Critical vulnerability in Ivanti CSA 4.6 (Cloud Services Appliance)

Ivanti has released a security advisory addressing a critical vulnerability affecting Ivanti CSA 4.6 (Cloud Services Appliance). The vulnerability affects Ivanti CSA 4.6 before Patch 519.

Audience focus: Small & medium businesses Organisations & Critical Infrastructure Government

19 Sep 2024

Advisory

People’s Republic of China-Linked Actors Compromise Routers and IoT Devices for Botnet Operations

Cyber actors may have used botnet to compromise thousands of Internet-connected devices.

Audience focus: Individuals & families Small & medium businesses Organisations & Critical Infrastructure Government

06 Sep 2024

Advisory

Russian Military Cyber Actors Target U.S. and Global Critical Infrastructure

The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and National Security Agency (NSA) assess that cyber actors affiliated with the Russian General Staff Main Intelligence Directorate (GRU) 161st Specialist Training Center (Unit 29155) are responsible for computer network operations against global targets for the purposes of espionage, sabotage, and reputational harm since at least 2020.

Audience focus: Organisations & Critical Infrastructure Government

Think you might be impacted?

Cybercrime is the use of a computer or online network to commit crimes such as fraud, online image abuse, identity theft or threats and intimidation.

You can report cybercrime to the police via ReportCyber.

Archived alerts and advisories

View our archived alerts and advisories

What are you looking for?

About us

Learn the basics

Protect yourself

Threats

Report and recover

Resources for business and government

All alerts and advisories

Think you might be impacted?

Archived alerts and advisories

View other content topics

Thanks for your feedback!

Optional

Acknowledgement of Country

Alerts and advisories

All alerts and advisories

2023 top routinely exploited vulnerabilities

Vulnerability in Fortinet’s FortiManager

Iranian cyber actors’ brute force and credential access activity compromises critical infrastructure

Critical vulnerability in Ivanti CSA 4.6 (Cloud Services Appliance)

People’s Republic of China-Linked Actors Compromise Routers and IoT Devices for Botnet Operations

Russian Military Cyber Actors Target U.S. and Global Critical Infrastructure

Think you might be impacted?

Archived alerts and advisories

View other content topics

Never miss a threat

Thanks for your feedback!

Optional