Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Phone and email scammers impersonating the ASD's ACSC Phone and email scammers impersonating the ASD's ACSC 04 Nov 2020 Alert Alert on government impersonation scams: Australian government agencies will never ask for computer access, crypto, or gift cards. Verify callers via official channels.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Remote code execution vulnerability present in SonicWall SMA 100 series appliances Remote code execution vulnerability present in SonicWall SMA 100 series appliances 19 Jan 2022 Alert Alert on SonicWall SMA 100 vulnerability (CVE-2021-20038) that could allow unauthenticated remote code execution. Affected organisations should apply patches immediately.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Log4j: What Boards and Directors Need to Know Log4j: What Boards and Directors Need to Know 07 Jan 2022 Advisory Advisory explains Log4j risks for boards and directors, outlining business impacts, governance responsibilities and actions to reduce exposure.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / 2021-007: Log4j vulnerability – advice and mitigations 2021-007: Log4j vulnerability – advice and mitigations 15 Dec 2021 Advisory Advisory on the Log4j vulnerability, including affected systems, exploitation risks, and mitigation strategies to reduce exposure.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Use of Log4j vulnerabilities in ransomware activity Use of Log4j vulnerabilities in ransomware activity 23 Dec 2021 Alert Alert on increased ransomware activity exploiting Log4j vulnerabilities, with Australian organisations at risk from easily exploited security weaknesses.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Mitigating Log4Shell and Other Log4j-Related Vulnerabilities Mitigating Log4Shell and Other Log4j-Related Vulnerabilities 23 Dec 2021 Advisory Advisory warns attackers are actively exploiting Log4Shell and related Log4j flaws, providing guidance to identify, patch and mitigate risks.
