View all advisories

15 May 2018

Protecting against VPNFilter malware

Once a malicious actor compromises a device using VPNFilter malware, they are able to collect network traffic (including website credentials) traversing the device. Importantly, the malware can also be used to disable the device.

17 Apr 2018

Secure the Cisco IOS and IOS XE Smart Install Feature

Organisations are advised to identify Cisco devices running Smart Install within their networks, evaluate the need of running this feature, and remove or secure the feature as required. Both the ACSC and Cisco documentation contain details on how to accomplish this.

29 Jun 2017

Update on the initial infection vector of the Petya ransomware campaign

This is an example of where a lack of patching and continued use of out-dated protocols presents a significant risk to organisational IT security.

28 Jun 2017

Update on Petya ransomware campaign

The ACSC is aware of a large-scale ransomware campaign that is impacting organisations globally. The campaign is variously known as 'Petya', 'NotPetya', 'SortaPetya', 'Petna' or 'GoldenEye'.

15 Nov 2015

Web Shells – Threat Awareness and Guidance

This advisory outlines the Web shells threat and provides prevention, detection and mitigation strategies for administrators of web servers that have active content languages installed.