Access publications and alerts / Alerts and advisories / Archived alerts and advisories / 2021 Top Routinely Exploited Vulnerabilities 2021 Top Routinely Exploited Vulnerabilities 28 Apr 2022 Advisory Learn about the top 15 CVEs routinely exploited by malicious cyber actors in 2021
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / 2022-004: ASD's ACSC Ransomware Profile – ALPHV (aka BlackCat) 2022-004: ASD's ACSC Ransomware Profile – ALPHV (aka BlackCat) 14 Apr 2022 Advisory Advisory on ALPHV (BlackCat/Noberus) ransomware, detailing its emergence, global targeting of sectors and risks to organisations.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Multiple vulnerabilities present in the Spring Framework for Java Multiple vulnerabilities present in the Spring Framework for Java 31 Mar 2022 Alert Alert on multiple Java Spring framework vulnerabilities, including SpringShell, which may expose web applications to serious security risks.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Remote code execution vulnerability present in Sophos Firewall Remote code execution vulnerability present in Sophos Firewall 30 Mar 2022 Alert Alert on Sophos Firewall vulnerability (CVE-2022-1040) affecting versions prior to 18.5. Exploitation could enable remote code execution. Apply patches immediately.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Australian organisations encouraged to urgently adopt an enhanced cyber security posture Australian organisations encouraged to urgently adopt an enhanced cyber security posture 23 Feb 2022 Alert Alert advising organisations to urgently strengthen cyber security due to increased global threats following the attack on Ukraine.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / New domain name changes could leave your business or organisation at risk New domain name changes could leave your business or organisation at risk 23 Mar 2022 Alert Alert on .au domain rollout may expose organisations to fraudulent cyber activity.
