Alerts and advisories

All alerts and advisories

The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) are releasing this joint Cybersecurity Advisory to disseminate known BianLian ransomware and data extortion group IOCs and TTPs identified through FBI and ASD's ACSC investigations as of March 2023.

Audience focus: Small & medium businesses Organisations & Critical Infrastructure

13 Nov 2024

Advisory

2023 top routinely exploited vulnerabilities

This advisory provides details, collected and compiled by the authoring agencies, on the Common Vulnerabilities and Exposures (CVEs) routinely and frequently exploited by malicious cyber actors in 2023 and their associated Common Weakness Enumerations (CWEs). Malicious cyber actors exploited more zero-day vulnerabilities to compromise enterprise networks in 2023 compared to 2022, allowing them to conduct operations against high priority targets.
The authoring agencies strongly encourage vendors, designers, developers, and end-user organizations to implement the following recommendations, and those found within the Mitigations section of this advisory, to reduce the risk of compromise by malicious cyber actors.

Audience focus: Small & medium businesses Organisations & Critical Infrastructure Government

24 Oct 2024

Alert rating: Critical

Vulnerability in Fortinet’s FortiManager

The ASD’s ACSC is aware of a vulnerability affecting all versions of Fortinet's FortiManager device that enables an unauthorised actor access to the FortiManager console (CVE-2024-47575). FortiManager devices provide centralised management of Fortinet devices from a single console.

Audience focus: Small & medium businesses Organisations & Critical Infrastructure Government

17 Oct 2024

Advisory

Iranian cyber actors’ brute force and credential access activity compromises critical infrastructure

The Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), and the National Security Agency (NSA) are releasing this joint Cybersecurity Advisory to warn network defenders on Iranian cyber actors’ compromising, frequently using brute force attacks, organizations across multiple critical infrastructure sectors, including the healthcare and public health (HPH), government, information technology, engineering, and energy sectors. The actors likely aim to obtain credentials and information describing the victim’s network that can then be sold to enable access to cybercriminals.

Audience focus: Organisations & Critical Infrastructure Government

20 Sep 2024

Alert rating: Critical

Critical vulnerability in Ivanti CSA 4.6 (Cloud Services Appliance)

Ivanti has released a security advisory addressing a critical vulnerability affecting Ivanti CSA 4.6 (Cloud Services Appliance). The vulnerability affects Ivanti CSA 4.6 before Patch 519.

Audience focus: Small & medium businesses Organisations & Critical Infrastructure Government

19 Sep 2024

Advisory

People’s Republic of China-Linked Actors Compromise Routers and IoT Devices for Botnet Operations

Cyber actors may have used botnet to compromise thousands of Internet-connected devices.

Audience focus: Individuals & families Small & medium businesses Organisations & Critical Infrastructure Government

Think you might be impacted?

Cybercrime is the use of a computer or online network to commit crimes such as fraud, online image abuse, identity theft or threats and intimidation.

You can report cybercrime to the police via ReportCyber.

Archived alerts and advisories

View our archived alerts and advisories

What are you looking for?

About us

Learn the basics

Protect yourself

Threats

Report and recover

Resources for business and government

All alerts and advisories

Think you might be impacted?

Archived alerts and advisories

View other content topics

Thanks for your feedback!

Acknowledgement of Country

Alerts and advisories

All alerts and advisories

#StopRansomware: BianLian Ransomware Group

2023 top routinely exploited vulnerabilities

Vulnerability in Fortinet’s FortiManager

Iranian cyber actors’ brute force and credential access activity compromises critical infrastructure

Critical vulnerability in Ivanti CSA 4.6 (Cloud Services Appliance)

People’s Republic of China-Linked Actors Compromise Routers and IoT Devices for Botnet Operations

Think you might be impacted?

Archived alerts and advisories

View other content topics

Never miss a threat

Thanks for your feedback!