You can view all our news from this page. Use the filters below to filter by audience type, title and summary and the sort options to sort for the most recently updated or published content.
06 Jul 2020
Staying off the hook in phishing attacks
The Australian Cyber Security Centre (ACSC) has seen a significant increase in reporting in the past few months of COVID-19 themed phishing scams, using all sorts of lures to try and trick people into handing over personal details.
01 Jul 2020
Announcing the ACSC Small Business Survey Report
Today ASD’s ACSC has published the ACSC Small Business Survey Report: How Australian Small Businesses Understand Cyber Security.
18 Jun 2020
Hardening Microsoft Windows 10 version 1909 Workstations
The Australian Cyber Security Centre (ACSC) has produced updated guidance to help information technology managers securely configure workstations (and similar devices) running Microsoft Windows operating systems.
22 May 2020
Safeguarding Australia’s critical infrastructure from cyber attack
The Australian Cyber Security Centre (ACSC) has produced advice to help critical infrastructure providers protect themselves from cyber attack as key staff work remotely during the COVID-19 pandemic.
20 May 2020
Unacceptable malicious cyber activity
As Australians and the international community band together to respond to COVID-19, the Australian Government is concerned that malicious cyber actors are seeking to exploit the pandemic for their own gain.
12 May 2020
Government service agents urged to protect clients and themselves
Agents of government services, such as taxation agents, BAS agents and taxation (financial) advisers, are attractive targets for cybercriminals.
08 May 2020
APT activity targeting Australian health sector
Advanced Persistent Threat (APT) actors are actively targeting health sector organisations and medical research facilities in Australia.
30 Apr 2020
National cyber security exercises for Australia’s electricity industry
In November 2019, the Australian Signals Directorate’s Australian Cyber Security Centre coordinated a national cyber security exercise series in partnership with Australia’s electricity industry and government agencies.
20 Apr 2020
COVID-19 cyber scams mount against Australians
Cybercriminals continue to target Australians through a range of COVID-19 themed scams, fraud attempts and deceptive email schemes, the Australian Cyber Security Centre (ACSC) has warned in a new threat update.
15 Apr 2020
Are you cyber-safe at home?
With increasing numbers of Australians working from home to combat the spread and impact of COVID-19, the Australian Cyber Security Centre (ACSC) has issued a new advisory containing tips to reduce the risk of Australians falling victim to cybercriminals at home.
07 Apr 2020
Protecting small business against cyber attacks during COVID-19
The Australian Cyber Security Centre (ACSC) has published advice on how small businesses can better protect themselves from cyber attacks and disruptions during COVID-19.
02 Apr 2020
Stay safe and be tele aware
In light of COVID-19, many businesses and individuals are now turning to web conferencing systems, like Zoom, Skype, Google Hangouts, GoToMeeting and Cisco WebEx to connect online.
01 Apr 2020
ACSC program enters its next phase through JCSCs
The ACSC Partnership Program is increasingly bringing industry, academia, law enforcement and government agencies together in collaborative work spaces, enabling information-sharing and network-hardening across the economy. This is being enabled through the network of Joint Cyber Security Centres (JCSCs) around Australia.
ACSC aware of critical vulnerability in Citrix Application Delivery Controller and Citrix Gateway
The Australian Signals Directorate’s Australian Cyber Security Centre (ACSC) is aware of a critical vulnerability that exists in the Citrix Application Delivery Controller (ADC) (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway).
27 Mar 2020
Cyber scams during the COVID-19 crisis - ABC Radio interview
Mr Karl Hanmore, acting Head Australian Cyber Security Centre, interview with Wendy Harmer and Robbie Buck on ABC Radio Sydney, 27 March 2020
Microsoft warns of vulnerabilities in Adobe Type Manager Library
The ACSC is aware of Microsoft’s recent disclosure of two remote code execution (RCE) vulnerabilities in the Windows Adobe Type Manager Library. Microsoft reports that there is targeted exploitation of these vulnerabilities.
13 Mar 2020
Cyber security is essential when preparing for COVID-19
Ensuring good cyber security measures now is the best way to address the cyber threat.
12 Mar 2020
Microsoft warns of vulnerabilities in SMBv3 (update: patch released 13 March 2020)
The ACSC is aware of Microsoft’s recent disclosure of a vulnerability in the Microsoft Server Message Block 3.1.1 (SMBv3) protocol called CVE-2020-0796, also known as EternalDarkness.
02 Mar 2020
Joint Australian Signals Directorate and Digital Transformation Agency Public Statement on Independent Review of CSCP and IRAP
In late July 2019, the Australian Signals Directorate (ASD) commissioned an independent review of its Cloud Services Certification Program (CSCP) and Information Security Registered Assessors Program (IRAP).
17 Jan 2020
Top tips to avoid ticket scammers online
Follow our tips for buying tickets safely online.
03 Dec 2019
Shopping safely online at holiday time
What are the do’s and don’ts to avoid online shopping scams? Read our tips now.
28 Nov 2019
Online fraud and shopping scams among the top cybercrimes targeting Australians
Australians are urged to be vigilant and protect themselves online, especially over the busy festive period.
07 Nov 2019
National Cyber Security Committee urges vigilance as two concerning cyber security threats are in the wild
The ACSC, with its state and territory partners, is continuing to respond to the widespread malware campaign known as Emotet while responding to reports that hackers are exploiting the BlueKeep vulnerability to mine cryptocurrency.
24 Oct 2019
Widespread exploitation of vulnerable systems via Emotet malware
The ACSC is investigating a widespread malware campaign known as Emotet. Emotet is a Trojan virus delivered via emails sent with malicious attachments.
15 Oct 2019
Stay Smart Online Week - it's a wrap!
As Stay Smart Online Week comes to a close for another year, we wanted to take a moment to look back on the week.
08 Oct 2019
Protect yourself online – in your language
Check out our fact sheets translated into five languages.
07 Oct 2019
Reverse the threat of cybercrime – Stay Smart Online Week 2019
Take control of your online identity this Stay Smart Online Week
04 Oct 2019
Protect your business online this Stay Smart Online Week
Cybercriminals target businesses of all sizes, stealing business and customer information to commit identity theft, fraud and other crimes. The consequences of this can be devastating.
01 Oct 2019
Vulnerability in Pulse Connect Secure VPN Software
The Australian Signals Directorate’s Australian Cyber Security Centre (ACSC) is aware of a working exploit for a vulnerability that exists in the Pulse Connect Secure Virtual Private Network (VPN) solution software.
07 Sep 2019
ACSC confirms the public release of BlueKeep exploit
The Australian Signals Directorate’s Australian Cyber Security Centre (ACSC) is aware of the overnight release of a working exploit for the vulnerability known as BlueKeep (CVE-2019-0708).
Australian businesses and users of older versions of Windows should update their systems as soon as practically possible, before hackers further refine their tools and tradecraft in order to fully utilise this exploit.
04 Sep 2019
Australian Government Information Security Manual updated
The Australian Signals Directorate (ASD)’s Australian Cyber Security Centre (ACSC) has released updates to the Australian Government Information Security Manual (ISM) to help organisations set the strategic framework for protecting their systems and information from cyber threats.
29 Aug 2019
Electricity program generates a buzz
The ACSC has been actively working with energy sector organisations and government agencies to strengthen their resilience to cyber security threats.
28 Aug 2019
Largest survey to improve cyber security for Australia’s small businesses
It takes a team effort to make Australia the safest place to connect online, and this is one of the reasons why the ACSC is undertaking its largest-ever survey of small to medium-sized businesses in Australia.
12 Aug 2019
UPDATE: ACSC confirms potential exploitation of BlueKeep vulnerability
Thousands of Australian businesses using older Windows systems should immediately install a patch to avoid being compromised.
26 Jul 2019
Cyber security best-practice in mergers, acquisitions and MoG changes
The ACSC has developed tailored advice to help organisations manage the increased cyber security risks, including when data is being migrated from one system to another. Businesses undergoing major organisational change, whether it be through a merger, acquisition or Machinery of Government changes, are an attractive target for cyber criminals because of significant upheaval and disruption to the normal flow of business.
25 Jul 2019
Cyber defences tested in the ACSC and Splunk BOTS Day
The ACSC and Splunk Boss of the Security Operations Centre (BOTS) Day is underway today with up to 650 players participating across Australia and New Zealand. The region’s biggest capture-the-flag-style event tests the skills of cyber security professionals in our largest business, government and education organisations.
23 Jul 2019
Business Email Compromise freight forwarding scam
The Australian Cyber Security Centre (ACSC) is warning small to medium sized businesses supplying IT and electrical products of a social engineered email scam requesting quotes on goods.
02 Jul 2019
Updates to the Essential Eight Maturity Model
Our latest update to the Essential Eight Maturity Model (the Maturity Model) provides technical guidance to help organisations improve their cyber security maturity.
As the lead agency on cyber security, the ACSC assists organisations by adopting a risk management approach and providing expert advice that best meets their specific needs. It’s never one-size-fits-all.
19 Jun 2019
Australian Cyber Security Centre advises Windows users across Australia to protect against BlueKeep
The ACSC is aware of Microsoft’s recent disclosure of a remote desktop vulnerability called CVE-2019-0708, also known as BlueKeep. As an indication of just how significant the impacts of BlueKeep can be to their customers, Microsoft took the unusual step of publishing advice to warn of its ability to propagate or ‘worm’ through vulnerable computer systems, with no user interaction at all.
17 Jun 2019
ACSC Small Business Survey. Tell us about your cyber security challenges
The ACSC Small Business Survey is being shared with a range of government and small business support groups around Australia, inviting members and stakeholders to participate. The survey is an opportunity to share the challenges small businesses face and to know what they’re worried about, so we can help businesses of all kinds manage risks and minimise harm.
25 May 2019
Canva users advised to change your password
The ACSC is aware of a security incident affecting the Australian online design platform, Canva.
23 May 2019
Never let a stranger remotely access your devices
The ACSC regularly receives reports from businesses and members of the public about remote access scams. Allowing anyone open access to your devices can, and usually does, end with devastating consequences.
19 May 2019
Phone scammers impersonating ACSC
The ACSC is aware of a new scam where people call who pretend to be from the ACSC, seeking your help to act against cyber criminals.
17 May 2019
You need to patch to protect your business online
Malicious actors are compromising Australian business Remote Desktop Protocol (RDP) services, also known as Windows Terminal Services or Windows Remote Desktop.
15 May 2019
Users advised to update WhatsApp
The ACSC advises users of WhatsApp to implement the latest fix for a reported vulnerability.
Follow our essential steps to protect your business
This week is national Privacy Awareness Week, an annual initiative of the Office of the Australian Information Commissioner that raises awareness of privacy issues and the importance of protecting personal information.
02 May 2019
Take steps to better secure yourself
The ACSC has released a checklist to help Australians protect themselves from cyber criminals. Lottery and grant scams, identity theft, investment scams, hacking, phishing, dating and romance scams, online abuse and sextortion are just some of the threats people face.
17 Apr 2019
Registration date extended to join our MSP3 program
Head of the Australian Cyber Security Centre Alastair MacGibbon has issued an update for registered MSPs and those considering applying to join the Managed Service Provider Partner Program – MSP3.
03 Apr 2019
Subject - Urgent payroll request
Cyber criminals are trying to commit payroll fraud by sending fake emails requesting a change to your bank details.
Australian Cyber Security Hotline
1300 CYBER1(1300 292 371)