View all reports and statistics

16 Dec 2022

The Commonwealth Cyber Security Posture in 2022

The Commonwealth Cyber Security Posture in 2022 (the report) informs Parliament on the implementation of cyber security measures across the Commonwealth government, for the period January 2021 to June 2022. As of June 2022, the Commonwealth comprised 97 non-corporate Commonwealth entities (NCCEs), 71 corporate Commonwealth entities (CCEs) and 17 Commonwealth companies (CCs).

04 Nov 2022

ACSC Annual Cyber Threat Report, July 2021 to June 2022

The Annual Cyber Threat Report is ACSC’s flagship unclassified publication. The Report provides an overview of key cyber threats impacting Australia, how the ACSC is responding to the threat environment, and crucial advice for Australian individuals and organisations to protect themselves online.

15 Sep 2021

ACSC Annual Cyber Threat Report, July 2020 to June 2021

The ACSC Annual Cyber Threat Report 2020–21 has been produced by the Australian Cyber Security Centre, with contributions from the Defence Intelligence Organisation (DIO), Australian Criminal Intelligence Commission (ACIC), Australian Security Intelligence Organisation (ASIO), The Department of Home Affairs and industry partners.

10 Jun 2021

The Commonwealth Cyber Security Posture in 2020

The Commonwealth Cyber Security Posture Report in 2020 informs the Parliament of the status of the Commonwealth’s cyber security posture. Overall, the report found that Commonwealth entities continued to improve their cyber security in 2020. Ongoing effort is required to maintain the currency and effectiveness of cyber security measures.

22 Feb 2021

2020 Health Sector Snapshot

This Sector Snapshot is designed to enhance awareness of key cyber security threats in the health sector and advise executives and cyber security professionals within the health sector on what they can do to protect their organisation from cyber threats. This report provides a high-level overview of the cyber security environment within the health sector over a twelve month period (1 January to 31 December 2020).

03 Sep 2020

ACSC Annual Cyber Threat Report, July 2019 to June 2020

This report has been jointly produced by the ACSC, the ACIC and the AFP, and is the first unclassified annual threat report since the ACSC became part of the ASD in July 2018. The report identifies and describes key cyber security threats targeting Australian systems and networks, and provides a range of examples and real-world case studies of malicious activity targeting Australian networks, between July 2019 and June 2020. It provides mitigation advice that all Australians and organisations can take to defend against these threats.

29 Jan 2019

Manic Menagerie Investigation Report

This report details technical findings and mitigation advice related to the extensive compromise of at least eight Australian web hosting providers investigated by the Australian Cyber Security Centre (ACSC) in May 2018.

21 Dec 2018

MSP Investigation Report

The ACSC investigation report details the theft of commercial secrets, data and information from the Australian arm of a multinational construction services company via their Managed Service Provider.

12 Oct 2018

Joint Report on Publicly Available Hacking Tools

This report is a collaborative research effort by the cyber security authorities of five nations: Australia, Canada, New Zealand, the UK and USA. It highlights the use of five publicly available tools, observed in recent cyber incidents around the world.

15 Oct 2017

ACSC Threat Report 2017

This is the third Australian Cyber Security Centre (ACSC) Threat Report. It continues to reflect on the experience, focus, and mandates of the ACSC’s member organisations. The report provides an insight into what the Centre has been seeing, learning, and responding to, focusing on specific areas of change or new knowledge obtained.

15 Oct 2016

ACSC Threat Report 2016

This is the second Australian Cyber Security Centre (ACSC) Threat Report. It continues to reflect on the experience, focus, and mandates of the ACSC’s member organisations. The report provides an insight into what the Centre has been seeing, learning, and responding to, focusing on specific areas of change or new knowledge obtained.

15 Jul 2015

ACSC Threat Report 2015

This report describes the range of cyber adversaries targeting Australian networks, their motives, and the type of malicious activities they are conducting and their impact on Australian networks during 2014. It also offers mitigation advice on how organisations can defend against these activities.