View all news and media releases

28 Jul 2021

U.S., U.K., and Australia Issue Joint Cybersecurity Advisory

Cyber Agencies Share Top Routinely Exploited Vulnerabilities

28 Jul 2021

Joint advisory on top cyber vulnerabilities

The top 30 cyber security vulnerabilities exploited by malicious cyber actors since 2020 have been detailed in a joint advisory issued by the Australian Cyber Security Centre (ACSC) and counterpart cyber security agencies from the United States and the United Kingdom.

20 Jul 2021

Act now to defend against vicious cybercriminals

Cybercriminals are targeting Australians at an unprecedented level to steal sensitive information and money, including through business email compromise and ransomware attacks.

15 Jun 2021

Australia is fighting back against ransomware

Australians continue to be targeted by cybercriminals through ransomware campaigns impacting multiple sectors across our economy.

03 May 2021

Update your devices to keep cybercriminals out

Updating the software on electronic devices is one of the easiest and most important ways all Australians can defend against cybercriminals and be protected from online threats.

31 Mar 2021

ABC Radio interview with Head of ACSC

Abigail Bradshaw CSC, Head of Australian Cyber Security Centre, interview with Fran Kelly on ABC Radio National, 31 March 2021.

31 Mar 2021

Back-up data to defend against cybercrime

On World Back-up Day, the Australian Government is urging businesses, organisations and individuals to back-up their digital information to protect themselves against compromise.

17 Mar 2021

Head ACSC Address to AISA Cyber Conference 2021

'The Future of Cyber Security in Australia’ – Address by Abigail Bradshaw CSC, on 15 March 2021 Canberra Convention Centre.

25 Feb 2021

Multi-factor authentication for stronger cyber protection

Australians are being urged to strengthen proof of identity protections to help stop cybercriminals gaining unauthorised access to online information and accounts.

10 Feb 2021

Health Sector Snapshot

This Sector Snapshot is designed to enhance awareness of key cyber security threats in the health sector and advise executives and cyber security professionals within the health sector on what they can do to protect their organisation from cyber threats. This report provides a high-level overview of the cyber security environment from 1 January to 31 December 2020.

09 Feb 2021

Safer Internet Day 2021

Safer Internet Day on 9 February 2021 aims to raise awareness of emerging online issues and share strategies everyone can use for staying safe online.

19 Jan 2021

Staying secure online during back-to-school shopping

Parents are being urged to be vigilant while shopping online for school essentials this month, with back-to-school shopping opening up opportunities for cybercriminals to strike.

23 Dec 2020

Staying secure when shopping online this festive season

With holiday season shopping in full swing, and the Boxing Day sales just around the corner, Australians are being urged to take care when shopping online to protect themselves from cybercriminals.

17 Dec 2020

Security tips for online gaming

The Australian Cyber Security Centre (ACSC) has published advice to help protect people while gaming on personal devices such as smartphones, tablets and computers, as well as gaming devices.

04 Dec 2020

Cyber security campaign – ABC NewsRadio interview

Ms Abigail Bradshaw CSC, Head Australian Cyber Security Centre, interview with Ali Crew on ABC NewsRadio Drive, 02 December 2020

03 Dec 2020

New cyber security campaign

Australians are being urged to strengthen their cyber defences and be alert to online threats through a new national cyber security campaign.

17 Nov 2020

Cyber security is a team sport for all Australians

On 6 November 2020, Abigail Bradshaw CSC, Head of the Australian Cyber Security Centre, made her inaugural public speech, Cyber Security in Australia – A team sport, hosted by the Institute of Public Administration Australia.

16 Nov 2020

Australians urged to ‘Think Before You Link’ online

The Australian Security Intelligence Organisation has launched the Think Before You Link campaign which aims to raise awareness of the threat of malicious social media profiles, and educate current and former security clearance holders to understand the signs of a malicious approach online.

14 Oct 2020

Top tips to avoid ticket scammers online

Follow our tips for buying tickets securely online.

15 Sep 2020

New pilot program to block cybercriminals impersonating Services Australia

Telstra, in conjunction with the Australian Cyber Security Centre (ACSC) and Services Australia, is boosting Australia’s cyber resilience through the launch of a new security measure to block malicious text messages.

02 Sep 2020

Advice for users and manufacturers of Internet of Things devices

The ACSC has developed information to help the community buy and use internet-connected devices securely – such as smart fridges, smart televisions, baby monitors and security cameras.

06 Aug 2020

Australia’s Cyber Security Strategy 2020

The Australian Government has today launched Australia’s Cyber Security Strategy 2020.

22 Jul 2020

US Department of Justice indictment of cyber actors

The Australian Government expresses its concern over reports of global malicious cyber intrusions, as detailed in today’s unsealing of indictments by the US Department of Justice.

17 Jul 2020

UK-US-Canada Joint Advisory on Russia

Today, Australia declares its support for the release of the Joint Cyber Security Advisory by the US, UK and Canada, which details malicious cyber activity by Russian actors targeting organisations involved in COVID-19 vaccine development.

10 Jul 2020

Security tips for social media and social networking apps

Social media sites, social networking and messaging apps can pose a number of risks to both organisations and individuals when used in an inappropriate or unsafe manner.

06 Jul 2020

Staying off the hook in phishing attacks

The Australian Cyber Security Centre (ACSC) has seen a significant increase in reporting in the past few months of COVID-19 themed phishing scams, using all sorts of lures to try and trick people into handing over personal details.

01 Jul 2020

Announcing the ACSC Small Business Survey Report

Today ASD’s ACSC has published the ACSC Small Business Survey Report: How Australian Small Businesses Understand Cyber Security.

12 May 2020

Government service agents urged to protect clients and themselves

Agents of government services, such as taxation agents, BAS agents and taxation (financial) advisers, are attractive targets for cybercriminals.

20 Apr 2020

COVID-19 cyber scams mount against Australians

Cybercriminals continue to target Australians through a range of COVID-19 themed scams, fraud attempts and deceptive email schemes, the Australian Cyber Security Centre (ACSC) has warned in a new threat update.

15 Apr 2020

Are you cyber-safe at home?

With increasing numbers of Australians working from home to combat the spread and impact of COVID-19, the Australian Cyber Security Centre (ACSC) has issued a new advisory containing tips to reduce the risk of Australians falling victim to cybercriminals at home.

02 Apr 2020

Stay safe and be tele aware

In light of COVID-19, many businesses and individuals are now turning to web conferencing systems, like Zoom, Skype, Google Hangouts, GoToMeeting and Cisco WebEx to connect online.

01 Apr 2020

ACSC aware of critical vulnerability in Citrix Application Delivery Controller and Citrix Gateway

The Australian Signals Directorate’s Australian Cyber Security Centre (ACSC) is aware of a critical vulnerability that exists in the Citrix Application Delivery Controller (ADC) (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway).

01 Apr 2020

ACSC program enters its next phase through JCSCs

The ACSC Partnership Program is increasingly bringing industry, academia, law enforcement and government agencies together in collaborative work spaces, enabling information-sharing and network-hardening across the economy. This is being enabled through the network of Joint Cyber Security Centres (JCSCs) around Australia.

27 Mar 2020

Microsoft warns of vulnerabilities in Adobe Type Manager Library

The ACSC is aware of Microsoft’s recent disclosure of two remote code execution (RCE) vulnerabilities in the Windows Adobe Type Manager Library. Microsoft reports that there is targeted exploitation of these vulnerabilities.

27 Mar 2020

Cyber scams during the COVID-19 crisis - ABC Radio interview

Mr Karl Hanmore, acting Head Australian Cyber Security Centre, interview with Wendy Harmer and Robbie Buck on ABC Radio Sydney, 27 March 2020

13 Mar 2020

Cyber security is essential when preparing for COVID-19

Ensuring good cyber security measures now is the best way to address the cyber threat.

12 Mar 2020

Microsoft warns of vulnerabilities in SMBv3 (update: patch released 13 March 2020)

The ACSC is aware of Microsoft’s recent disclosure of a vulnerability in the Microsoft Server Message Block 3.1.1 (SMBv3) protocol called CVE-2020-0796, also known as EternalDarkness.

02 Mar 2020

Joint public statement on independent review of CSCP and IRAP

In late July 2019, the Australian Signals Directorate (ASD) commissioned an independent review of its Cloud Services Certification Program (CSCP) and Information Security Registered Assessors Program (IRAP).

03 Dec 2019

Shopping safely online at holiday time

What are the do’s and don’ts to avoid online shopping scams? Read our tips now.

28 Nov 2019

Online fraud and shopping scams among the top cybercrimes targeting Australians

Australians are urged to be vigilant and protect themselves online, especially over the busy festive period.

07 Nov 2019

National Cyber Security Committee urges vigilance as two concerning cyber security threats are in the wild

The ACSC, with its state and territory partners, is continuing to respond to the widespread malware campaign known as Emotet while responding to reports that hackers are exploiting the BlueKeep vulnerability to mine cryptocurrency.

24 Oct 2019

Widespread exploitation of vulnerable systems via Emotet malware

The ACSC is investigating a widespread malware campaign known as Emotet. Emotet is a Trojan virus delivered via emails sent with malicious attachments.

08 Oct 2019

Protect yourself online – in your language

Check out our fact sheets translated into five languages.

07 Sep 2019

ACSC confirms the public release of BlueKeep exploit

The Australian Signals Directorate’s Australian Cyber Security Centre (ACSC) is aware of the overnight release of a working exploit for the vulnerability known as BlueKeep (CVE-2019-0708). Australian businesses and users of older versions of Windows should update their systems as soon as practically possible, before hackers further refine their tools and tradecraft in order to fully utilise this exploit.

29 Aug 2019

Electricity program generates a buzz

The ACSC has been actively working with energy sector organisations and government agencies to strengthen their resilience to cyber security threats.

12 Aug 2019

UPDATE: ACSC confirms potential exploitation of BlueKeep vulnerability

Thousands of Australian businesses using older Windows systems should immediately install a patch to avoid being compromised.

25 Jul 2019

Cyber defences tested in the ACSC and Splunk BOTS Day

The ACSC and Splunk Boss of the Security Operations Centre (BOTS) Day is underway today with up to 650 players participating across Australia and New Zealand. The region’s biggest capture-the-flag-style event tests the skills of cyber security professionals in our largest business, government and education organisations.

23 Jul 2019

Business Email Compromise freight forwarding scam

The Australian Cyber Security Centre (ACSC) is warning small to medium sized businesses supplying IT and electrical products of a social engineered email scam requesting quotes on goods.

02 Jul 2019

Updates to the Essential Eight Maturity Model

Our latest update to the Essential Eight Maturity Model (the Maturity Model) provides technical guidance to help organisations improve their cyber security maturity.

02 Jul 2019

Updates to the Essential Eight Maturity Model

As the lead agency on cyber security, the ACSC assists organisations by adopting a risk management approach and providing expert advice that best meets their specific needs. It’s never one-size-fits-all.