LOGIN
You can view all our news and media releases from this page. Use the filters below to filter by audience type, title and summary and the sort options to sort for the most recently updated or published content.
02 Jul 2019
Updates to the Essential Eight Maturity Model
Our latest update to the Essential Eight Maturity Model (the Maturity Model) provides technical guidance to help organisations improve their cyber security maturity.
As the lead agency on cyber security, the ACSC assists organisations by adopting a risk management approach and providing expert advice that best meets their specific needs. It’s never one-size-fits-all.
19 Jun 2019
Australian Cyber Security Centre advises Windows users across Australia to protect against BlueKeep
The ACSC is aware of Microsoft’s recent disclosure of a remote desktop vulnerability called CVE-2019-0708, also known as BlueKeep. As an indication of just how significant the impacts of BlueKeep can be to their customers, Microsoft took the unusual step of publishing advice to warn of its ability to propagate or ‘worm’ through vulnerable computer systems, with no user interaction at all.
17 Jun 2019
ACSC Small Business Survey. Tell us about your cyber security challenges
The ACSC Small Business Survey is being shared with a range of government and small business support groups around Australia, inviting members and stakeholders to participate. The survey is an opportunity to share the challenges small businesses face and to know what they’re worried about, so we can help businesses of all kinds manage risks and minimise harm.
25 May 2019
Canva users advised to change your password
The ACSC is aware of a security incident affecting the Australian online design platform, Canva.
23 May 2019
Never let a stranger remotely access your devices
The ACSC regularly receives reports from businesses and members of the public about remote access scams. Allowing anyone open access to your devices can, and usually does, end with devastating consequences.
19 May 2019
Phone scammers impersonating ACSC
The ACSC is aware of a new scam where people call who pretend to be from the ACSC, seeking your help to act against cyber criminals.
17 May 2019
You need to patch to protect your business online
Malicious actors are compromising Australian business Remote Desktop Protocol (RDP) services, also known as Windows Terminal Services or Windows Remote Desktop.
15 May 2019
Follow our essential steps to protect your business
This week is national Privacy Awareness Week, an annual initiative of the Office of the Australian Information Commissioner that raises awareness of privacy issues and the importance of protecting personal information.
Users advised to update WhatsApp
The ACSC advises users of WhatsApp to implement the latest fix for a reported vulnerability.
02 May 2019
Take steps to better secure yourself
The ACSC has released a checklist to help Australians protect themselves from cyber criminals. Lottery and grant scams, identity theft, investment scams, hacking, phishing, dating and romance scams, online abuse and sextortion are just some of the threats people face.
17 Apr 2019
Registration date extended to join our MSP3 program
Head of the Australian Cyber Security Centre Alastair MacGibbon has issued an update for registered MSPs and those considering applying to join the Managed Service Provider Partner Program – MSP3.
03 Apr 2019
Subject - Urgent payroll request
Cyber criminals are trying to commit payroll fraud by sending fake emails requesting a change to your bank details.
30 Mar 2019
Fake Paypal emails request ‘account details’
The ACSC is aware of malicious emails that are falsely advising Australians that their account has violated Paypal rules. These phishing emails try to lure the recipient into sharing personal information which could then be used for identity theft and financial gain by cyber criminals.
26 Mar 2019
PageUp data incident
On Friday 1 June 2018 PageUp Limited, an online recruitment services organisation, notified their customers about a data incident in relation to the integrity of their systems proactively informing of a possible breach.
Plug in to ACSC for cyber resilience
The Australian Cyber Security Centre (ACSC) has launched a nationwide program of cyber resilience and response activities for the electricity industry and for government agencies that have an energy and cyber security role.
Keeping up with the updates
The ACSC advises users of Drupal and Firefox to implement the latest fixes for vulnerabilities.
21 Mar 2019
Norwegian aluminium giant hit by ransomware
Norsk Hydro, a Norwegian aluminium and renewable energy company, was subject to a ransomware attack on Tuesday, 19 March 2019.
WordPress 5.1.1 security update
The Australian Cyber Security Centre advises users and administrators of WordPress version 5.1 to update their applications to WordPress 5.1.1. The update addresses a vulnerability that could allow an attacker to take control of an affected website. WordPress 5.1 and prior versions are affected.
20 Mar 2019
Fake CIA emails requesting Bitcoin or arrest
The ACSC is aware of malicious emails claiming to be from the US Central Intelligence Agency (CIA) that are being received by Australians.
18 Mar 2019
Who will be Australia’s next Boss of the SOC?
The Australian Cyber Security Centre (ACSC) and Splunk are teaming up this week to host Australia’s largest ever cyber security challenge.
15 Mar 2019
Implementing the Essential Eight for MSPs
Following the global compromise of managed service providers or MSPs, the Australian Cyber Security Centre (ACSC) is calling on Australian businesses and individuals to be proactive in implementing better cyber security practices.
New approach to support cyber security
The updated Australian Government Information Security Manual (ISM) has been released by the Australian Cyber Security Centre (ACSC).
14 Mar 2019
A wave of fake social media accounts
Recently, the Australian Cyber Security Centre (ACSC) discovered multiple fake twitter accounts pretending to be affiliated with an Australian company. The accounts featured similar branding and messaging using fake identities and contact details, creating possible confusion for users looking for support.
12 Mar 2019
Joint report on publicly available hacking tools
This report is a collaborative research effort by the cyber security authorities of five nations: Australia, Canada, New Zealand, the UK and USA. It highlights the use of five publicly available tools, observed in recent cyber incidents around the world.
08 Mar 2019
Google Chrome security update
The ACSC advises Google Chrome users to update their browser in order to patch a known vulnerability.
Women in cyber security: Kylie McDevitt
Network engineering, common sense and top-grade resilience have propelled Kylie McDevitt into her role in the heart of cyber security in Australia’s capital.
22 Feb 2019
ACSC detects malicious activity targeting political party networks
ACSC identifies that during the recent Australian Parliament House Network investigation, a sophisticated state actor was also revealed to have undertaken malicious activities on Australian political party networks including The Nationals, Labor and Liberal.
20 Feb 2019
GPS week roll over 6 April
On 6 April, the GPS week counter rolls over and resets to zero. This change may affect industrial control systems and critical infrastructure owners and operators. This rollover may affect log time stamp information, loss of communication between devices, inability to authenticate multi-factor authentication, or the ability to log in to computers.
07 Feb 2019
Get serious about protecting commercial secrets
The ACSC urges organisations to step up efforts to protect themselves from cyber criminals, after the December quarter Notifiable Data Breaches Quarterly Statistics Report revealed an increase in reported malicious or criminal activity.
05 Feb 2019
ACSC celebrates Safer Internet Day
Today marks Safer Internet Day (SID), and the Australian Cyber Security Centre (ACSC) is a proud partner in supporting this year's theme -- 'Together for a better internet'.
01 Feb 2019
Scammers claiming to be from ICT service desks targeting user multi-factor authentication
The Australian Cyber Security Centre (ACSC) is aware of a phone scam asking staff members of a critical infrastructure organisation to reveal their multifactor authentication credentials.
24 Jan 2019
ACSC certifies Amazon Web Services to host protected data
The Australian Cyber Security Centre (ACSC) has certified Amazon Web Services (AWS) for hosting Australian Government data classified up to the PROTECTED classification level, providing assurance to Australian Government agencies that AWS complies with Australian Government security requirements.
23 Jan 2019
Get smarter with passwords
Whether you’re an individual or part of an organisation, the data dump of billions of stolen passwords and email addresses is a reminder to take action to protect yourself and your information.
18 Jan 2019
Has the global MSP hack affected your business?
The global hack of ICT managed service providers (MSPs) has affected businesses across Australia and the world.
14 Jan 2019
Don't get burned by email scams this summer
At this time of the year, Australia sees its fair share of extreme weather events. These events can take place unexpectedly, leaving Australians little time to consider the possibility of being the target of cybercrime with Cybercriminals eager to take advantage of these stressful situations, pursuing individuals and businesses when they least expect.
09 Jan 2019
Phishing email scam – tender invitation
The ACSC is aware of phishing emails allegedly from the Department of Infrastructure, Regional Development and Cities, inviting the recipient to respond to a tender invitation. This email is a scam, and the fake tender document attached contains malicious links that seek to steal your personal information.
"Whatsapp Gold" is a hoax
The Australian Cyber Security Centre is aware that messages are circulating on Whatsapp that attempt to lure people into using a ‘gold’ version of the app.
08 Jan 2019
ACSC adds Rackspace DHE to Certified Cloud Services List
The Australian Cyber Security Centre has added the Rackspace Dedicated Hosting Environment (DHE) to the Certified Cloud Services List (CCSL) for unclassified workloads, increasing the options available to Australian Government agencies.
07 Jan 2019
ACSC-ASEAN Strengthening Regional Cyber Security
An international hacking exercise in Perth last week saw thirty top cyber security incident responders from ten Association of South East Asian Nations (ASEAN) compete with their Australian counterparts to further strengthen regional cyber defences and cooperation.
29 Dec 2018
ACSC counters threat to web hosting providers
The extensive compromise of multiple web hosting providers and mitigation measures have been detailed in a report released today by the Australian Cyber Security Centre (ACSC). The findings of the ACSC investigation, Operation Manic Menagerie, show that eight Australian web hosting providers were compromised, allowing a malicious actor access to customer websites.
The extensive compromise of multiple web hosting providers and mitigation measures have been detailed in a report released today by the Australian Cyber Security Centre (ACSC).
21 Dec 2018
Microsoft warns of Internet Explorer vulnerability
Microsoft has released a security update for Internet Explorer after receiving a report from Google about a new vulnerability that is being used in targeted attacks.
National Cyber Security Adviser urges end to complacency after global theft of commercial secrets
The Australian Cyber Security Centre (ACSC) is providing assistance to ICT managed service providers (MSPs) in the wake of the global cyber security compromise confirmed by the Australian Government.
ACSC advice for MSPs
The Australian Cyber Security Centre (ACSC) is providing assistance to ICT managed service providers (MSPs) in the wake of the global cyber security compromise confirmed by the Australian Government. Alastair MacGibbon, Head of the ACSC and National Cyber Security Adviser, warns that complacency must be avoided in the boardrooms across Australia in light of the recent global cyber security compromise. The ACSC provides assistance and guidance to ICT Managed Service Providers (MSPs) with regards to securing their network effectively.
The ACSC is providing assistance to ICT managed service providers (MSPs) in the wake of the global cyber security compromise confirmed by the Australian Government.
18 Dec 2018
Cyber Incident Management Arrangements for Australian Governments
Australia’s Cyber Incident Management Arrangements (CIMA) outlines the inter-jurisdictional coordination arrangements and principles for Australian governments’ cooperation in response to national cyber incidents.
14 Dec 2018
Facebook warns 6.8 million users about photo bug
Up to 6.8 million people who uploaded their photos to Facebook may have shared more than they intended to because of an application program interface (API) bug.
Bomb threat email scam targeting Australians
The Australian Cyber Security Centre (ACSC) is aware of bomb threat emails being received by Australians.
